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In this Issue 

In our computerized society, there's always a prodigious amount of data 
in motion . much of it on the voice-frequency circuits of the telephone network. 
yf> To judge a voice-frequency circuit's suitability for carrying data, instruments 

^H^^k^k called transmission impairment measuring sets (TIMS) transmit test signals 
HM and measure a circuit's effect on these signals according to standards set 
™ I up by the CCITT or the Bell System, depending on the country. There's a 

^2 trade-off in this picture — while a circuit is being tested, it isn t available for 
data transmission. The paper on page 4 describes the design and theory of 
operation of a new kind of TIMS, the HP 4948A In-Service TIMS, that does 
away with this test-or-use decision. The ITIMS attaches to any voice-frequency access point in 
a circuit, and without disturbing normal data transmission, measures the parameters that other 
TIMS measure. The measurements the ITIMS makes aren't the ones described in the standards, 
but the results are comparable. Its technique, which makes interesting reading, involves imitating 
a modem and setting up a model of the circuit in parallel with the modem. 

Two months ago, in August, we presented the design story of two advanced handheld calculators, 
the HP-18C and the HP-28C. This month we have papers on the portable thermal printer for 
these calculators (page 21) and the infrared link between printer and calculator (page 16). The 
link is interesting because it's one-way only. The calculator sends data all the time, never knowing 
whether the printer is there. Link reliability is ensured partly by pacing the data transmissions so 
that even the slowest printer can keep up. As the paper on page 24 informs us, the production 
of the HP-18C and HP-28C called for technologies that were new to HP's calculator production 
operations, and for extensive use of computer-aided design (CAD) and manufacturing (CAM). 
The cover photo shows the printer with a CAD system simulation of its paper door rotation. 

The explosion in medical knowledge has raised fears among medical educators that the amount 
of knowledge a medical student needs to absorb may be outstripping the time available to teach 
it. Harvard Medical School is attacking this problem with their New Pathway curriculum, which 
makes heavy use of HP computers, electronic mail, and computer-based training modules. On 
page 28. four Harvard staff members describe the new curriculum and some early results. 

HP Laboratories' Bristol Research Centre is investigating formal methods of specifying system 
behavior, properties, and requirements, and is developing tools to provide machine support for 
rigorous software engineering. On page 37, two Bristol researchers report on their Framework 
for Program Development, a tool that facilitates the documented construction of correct programs. 

-R.P. Dolan 



What's Ahead 

An Important Notice to Our Readers 

After this month the Hewlett-Packard journal will become a bimonthly publication. Next month. 
November, there will be no issue Subsequent issues will be in December. February, April. June, 
August, and October. Each issue will be about twice the present size. This change will allow us 
to take advantage of some economies of scale and put a greater variety of articles into each 
issue. Current subscribers will continue receiving their copies, and subscriptions will continue to 
be free. As always, your comments are welcome. 

The December issue, in addition to the annual index, will have papers on the technical details 
of MPE XL, the commercial operating system for HP Precision Architecture computers such as 
the HP 3000 Series 930 and 950. Also featured will be the design of the HP 8780A Vector Signal 
Generator and the HP 8980A Vector Analyzer, which are stimulus response instruments for testing 
digital microwave radio systems, and the HP 3065AT Board Test System. 

Tne HP Journal oneoufarjott icchncai discuss-on ol in* topic* omftonitso n recenl articles and wi» publirth tone's expected lo be ol 'nte»est to out 'oadois Letters roust bo brie! ana arn subtect 
to editing LMtflrR. should no ndrtrussed to Editor. HewloIt-Pac-ard journal 3200 Hillview Avenue. Palo Alio CA 94304. USA 
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In-Service Transmission Impairment 
Testing of Voice-Frequency Data Circuits 

This transmission impairment measuring set operates on 
the live modem signal instead of special test signals. It 
warns of problems while the channel is in service, so 
preventive maintenance can be scheduled. 

by Norman Carder, William I. Dunn, James H. Elliott, David W. Grieve, and W. Gordon Rhind 



THE HP 4948A IN-SERVICE Transmission Impair- 
ment Measuring Set (ITIMS) advances the stale of 
the art in analog data communications link testing 
by offering new possibilities for testing leased voice-fre- 
quency data circuits. Conventional test methods require 
that service be suspended while testing lakes place. In-ser- 
vice testing allows the same measurements to be made 
directly on the modem signal without disrupting service. 
This means that if there is a problem, it can be investigated 
immediately without waiting until the circuit can be re- 
moved from service. The HP 4948A, Fig. 1. does not need 
a conventional test signal, but instead uses the live modem 
signal as its input. 

To perform an in-service test, the HP 4948A is connected 
to any suitable voice-frequency access point in a network. 
Because of the high input impedance of the HP 4948A. the 
circuit is not disturbed. If the user does not know the type 
of modem in use, the instrument will try lo identify it from 
a wide range of compatible modems. If the modem type is 
known, it can be entered manually to save time. After a 
short training time, the HP 4948A produces all its measure- 
ments simultaneously. This makes the instrument not only 
easy to use. but also very effective in troubleshooting. 

The major benefits of the HP 4948A are obtained by using 
it to test circuits that are still in service. However, it can 
also be used on out-of-service circuits. The HP 4948A can 



transmit and receive a tone, so it can work with other tone 
sources or conventional test sets. The HP 4948A can also 
transmit a simulated modem signal to allow out-of-service 
testing with another instrument. This is useful for bench- 
marking a circuit with a modem-like signal. 

Powerful features make the most of the HP 4948A's mea- 
surement capabilities. Extensive data logging makes long- 
term monitoring practical. The ITIMS can be left unat- 
tended for long periods, collecting and storing results in 
nonvolatile memory for later interrogation. To aid trou- 
bleshooting, the user can look back at intermittent faults 
afler they have occurred. Because a circuit's performance 
can be characterized over a period of lime, preventive 
maintenance is possible. 

The HP 4948A can print current or logged results and 
instrument settings. It can also be included in a network 
monitoring system controlled by a computer. Circuits in 
one location can be monitored or results from a number of 
locations can be concentrated at a central site (see Fig. 2). 

ITIMS Measurements 

In Ihe absence of channel impairments, the constellation 
of digital modulation stales received by a modem consists 
of a number of well-defined points (see Fig. 3) and no data 
errors will occur. Various constellation patterns exist for 
the different modem modulation schemes. The number of 



4948A IN SERVICE TBAN5Mi55iON i»mi»»i«i ««u>'« 




Fig. 1. The HP 4948 A In-Service 
Transmission Impairment Measur- 
ing Sel connects to any suitable 
voice-frequency access point in a 
data communications network 
and makes measurements of 
amplitude and phase distortion, 
noise, litter, gam and phase hits, 
impulse noise, and other impair- 
ments while the network is in use. 
Measurements are comparable to 
IEEE and CCITT standards 
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points in the constellation determines the number of data 
bits that can be transmitted per modulated symbol. For 
example, using a 16-point quadrature amplitude modula- 
tion |QAM) constellation, four data bits are transmitted per 
symbol, so a symbol rate of 2400 Hz allows a bit rate of 
9600 bits per second. 

In a real circuit, various Impairments may be added to 
the modem signal, resulting in the possibility of data errors. 
These can be categorized as either steady-state or transient 
impairments. The HP 4948A measures the following 
steady-stale impairments: 

" Attenuation and delay distortion. This is caused by the 
nonideal frequency responses of cabling, filters, and 
equalizers in the circuit. The adaptive equalizer in the 
modem will remove these distortions, so they do not 
normally affect the modem constellation. 

■ Signal-to-noise ratio. Noise arises from circuit ampli- 
fiers, crosstalk from other circuits, or quantization in 
digital transmission facilities. Noise causes the received 
constellation points to become clouded rather than well- 
defined points (see Fig. 4a). 

■ Phase jitter and modulation. Phase jitter is normally con- 
sidered to be the sum of phase modulation plus noise 
in the phase axis. The. most commonly found modulation 
components are 20 Hz (ringing current ). 60 Hz (commer- 
cial power), and up lo the fifth harmonic of these (see 
Fig. 4b). 

■ Amplitude jitter and modulation. These are not as com- 
monly observed as phase jiller, bill may originate from 
the same sources (see Fig. 4c). 

■ Frequency offset. An offset between the transmitted ( ai- 
rier frequency and the received carrier frequency may 



Fig. 2. One or more HP 4948A 
ITIMS can be included in a net- 
work monitoring system controlled 
by a central computer 

exist because of differences in modulating and demod- 
ulating carriers in analog carrier systems. This is re- 
moved by the digital phase-locked loop in the modem 
receiver and so cannot be observed on the received con- 
stellation, 

The HP 4948A measures the fol lowing transient impairments: 

■ Gain hits. These are sudden changes in signal power and 
may be caused by switching to standby facilities or carrier 
supplies. Fading or route changes in microwave facilities 
may also cause gain hits. The gain may return to its original 
level in a short time or remain al Ihe new level. 

■ Phase hits. These are sudden changes in carrier phase and 
may be caused by route changes in Ihe communications 
channel. 

■ Dropouts. These are considered to be negative gain hits 
greater than 12 (IB. 

Impulse noise. These are short spikes of noise well above 
the background noise level. Impulse noise may be caused 
by switches and relays operating in the vicinity of the cir- 
cuit. Impulses appear as abnormal points on ihe constella- 
tion. 

Comparison with Standard Measurement Techniques 

The measurement techniques used by the HP 4948A are 
not those described in CCI'IT and IEEE standards. However, 
Ihe standards have been used as the basis for designing the 
measurements, and the results are broadly comparable with 
those produced using conventional techniques. Because the 
HP 4948A makes measurements on Ihe live data signal rather 
than using artificial test tones, these measurements are in 
many cases a better indication of what is causing data errors 
in the modems being used. Because Ihe IIP 4948A makes 
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Fig. 3. Typical impairment-free constellation diagrams tor 
various digital modulation schemes. Each point represents 
one possible combination ot m-phase (I) and quadrature (Q) 
modulation components. 

measurements in-service, it provides a new tool lor main- 
taining and troubleshooting circuits without disrupting 
customers' data. 

User Interface 

On the front panel of the HP 4948A are a 4-linc-by-40- 
character liquid crystal display (LCD) and ten keys. The 
LCD is used to display measurement results, setups, and 
status information. Functionally similar information is 
grouped together into pages for display purposes. With the 
addition of two index pages, the structure is similar to a 
book. Three front-panel keys are provided for the user to 
browse through this "book." NEXT and PREV PAGE keys 
allow pages to be turned, and an INDEX PAGE key allows 
the user to select a page directly from one of the index 
pages (see Fig. 5). 

To allow the user to communicate information to the 
instrument, active fields are used. These are defined as 
fields on the display at which a cursor can be positioned 
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Fig, 4. (a) Noise added to a CCITT V.29 constellation (b) 
Phase titter added to a V.29 constellation (c) Amplitude jitter 
added to a V 29 constellation. 

and an instrument parameter value changed. The form of 
such a field is: 

PARAMETER ► Value 



6 HEWLETT-PACKARD JOURNAL OCTOBER I9e7 

©Copr. 1949-1998 Hewlett-Packard Co. 



E S 



The NEXT 
ana prevous 

PAGE Keys 
step through 

the pages. 




Prints Output 



Pnnt«* Control 



Control 



The PAGE index key 
alternates the display 
between the index 
and the page being 
highlighted by the cursor 



9 
10 



Fig. 5. Tne HP 4948A user interface organizes functionally 
similar information into pages lor display. The user can step 
through the pages or select one from the index pages 

next and prev CURSOR keys allow the cursor to be 
positioned at the field (denoted by a ►] and the NEXT and 
PREV CHANGE keys allow the selection of parameter values 
(see Fig. 6a). 

The instrument returns information to the user in the 
form of results and status reports. The results are given on 
the CURRENT (Fig. fib) and LOGGED results pages. Each result 
can be displayed in turn by selecting the options on Iht; 
results active field. Fig. Be shows a status field, which is 
prefixed by the special character*. These special charac- 
ters allow the user In identify ► as active fields and ♦ as 
status fields, and quickly distinguish between them. 

Data Logging 

The HP 494RA presents the steady-state measurements 
and transient counts as current results (see Fig. 7). When 
dala logging is active, data reduction is performed on the 
current results and the receiver state lo create log entries. 
The receiver state indicates whether .ill measurements are 
available and provides other information to the user. 

The HI' 4948A logs either periods or events. The logging 



OPERATING MODE* r eceive modem si9nal 
MODEM SELECT I ON ► automatic 



CURRENT ►■carrier frequency 
UQLUE = 1699.9 Hz 



(b) 



RECEIUEP 5TRTUS 

♦ all measurements available 

♦ found U.29 type 



to 

Fig. 6. (a) Active fields allow the user to communicate with 
the instrument Each field has a parameter name and a user- 
selected value (b) Results pages are used by the instrument 
to return information to the user, (c) Status fields show various 
instrument conditions. 

store retains the most recent 1000 events or 200 periods 
for a single measurement session. Should a power failure 
occur during a logging session, logging is automatically 
resumed following power restoration. 

The log contents can be displayed on the instrument 
front panel or printed on an HP-IB or RS-232-C printer. 
Alternatively, logged results can be extracted by either 
HP-IB or RS-232-C remote control. 

Period Logging 

Period logging provides regular measurement summaries 
at intervals of 5, 15. 30. or 60 minutes. The period average 
and maximum and minimum values of steady-state mea- 
surements are recorded, together with the total number of 
transients occurring during the period (see Fig. 8). 

Warning messages are provided to indicate abnormal 
conditions (e.g.. power failure) or to provide further infor- 
mation (e.g., fallback, receiver training]. This exlru informa- 
tion allows the user to assess the significance nt Ihe logged 
measurements and thus provides a complete picture of 
circuit performance during Ihe period. 

If a period is interrupted by a power failure, all results 
acquired during the active parts of Ihe period are preserved 



28 Jan 1987 l'.:2'«:15 
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Fig. 7. An HP 494SA printout of 
current results 
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RESULTS FOR PERIOD STARTED: 17 Feb 15:59:13 HP4948A 

WARNINGS 
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0 0 0 0 0 0 
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LOCGED FOR 83% OF PERIOD # 0 0 0 0 0 
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Fig. 8. Period log printout 



in !he log. 

Event Logging 

In event logging, the emphasis is on highlighting devia- 
tions from acceptable circuit performance and accurately 
time stamping their occurrence (see Fig. 9). 

Once every second, each steady-state measurement is 
compared with limits set by the user and a specific alarm 
is registered for each limit violation. An event log entry is 
created corresponding to every second for which any of 
the following conditions is detected: 

Limit alarm 
s Transient 



u Change in receiver state 
- 1 Power failure 

■ Recovery after power failure. 

How the ITIMS Makes Measurements 

The HP 4948A can be considered to be a universal 
modem receiver that is able to receive signals from many 
commonly used modems and make measurements al the 
same lime. It can train onto the modem signal without 
needing the synchronizing signal required by standard mo- 
dems. Measurement processing is then performed to make 
measurements of the channel impairments. The HP 4948A 
only analyzes the line signal; it does not decode the re- 
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Fig. 9. Event log printout. 



Fig. 10. Block diagram of a 
modem receiver lor a voice-fre- 
quency data communications 
channel The HP 4948A performs 
all the same functions along with 
measurement functions 
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ceived data, so data security is not threatened. 

A typical modem signal has a passband spectrum cen- 
tered at its carrier frequency (typically 1700 or 1800 Hz) 
and a bandwidth equal to its symbol rate (also known as 
the baud rate). 

The first stage of a modem receiver (see Fig. 10) consists 
of a Hilbert transform pair of passband input filters (see 
"Processing Passband Signals in Baseband." page 11). 
These filters band-limit the input to the bandwidth of the 
received signal and also transform it into a complex signal 
having in-phase (I) and quadrature (Q) components which 
are then demodulated by the expected carrier frequency. 

Equalization removes attenuation or delay distortion pres- 
ent in the channel and provides an equivalent Nyquist 
frequency response which allows the equalizer output to 
be sampled at the symbol rate without intersymbol interfer- 
ence. 

If the expected carrier frequency used in demodulation 
is not exactly the same as the carrier frequency of the trans- 
mit modem, or if some frequency offset has been introduced 
by the channel, a further demodulation is required. This 
is provided by a digital phase-locked loop (see "Digital 
Phase-Locked Loops." page 15). 

The I and Q components at the output of the digital 
phase-locked loop can be plotted to give the modem's re- 
ceived constellation pattern. This is sliced to decide which 
point has been transmitted. (The slicer is basically a com- 
parator network that determines which state on the constel- 
lation diagram the received symbol belongs to.) Various 
errors are computed and used to update the adaptive 
equalizer (see "LMS Algorithm for Equalizer Update," page 
13) and the digital phase-locked loop. In this way, slow 
changes in the channel characteristics are tracked by the 
modem receiver. 

The HP 4948A performs all of the modem receiver func- 
tions shown in Fig. 10, along with additional measurement 
functions. 

Attenuation and Delay Distortion Measurements 

In the modem receiver, attenuation and delay distortion 
are equalized to enable data to be received. To measure 
attenuation and delay distortion, the HP 4948A uses the 
received demodulated data at the input of its adaptive 
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Fig. 11. The HP 4948A sets up a channel model in parallel 
with the adaptive equalizer 



(cT 



Fig. 12. (a) Model tap coefficients lor a channel having both 
attenuation and delay distortion (b) Attenuation printout lor 
the same channel (c) Delay printout tor the same channel 



© Copr. 1949-1998 Hewlett-Packard Co. 



OCTOBER 1987 HEWLETT-PACKARD JOURNAL 9 



equalizer and the samples from its slicer. The HP 4948A 
sets up a channel model in parallel with the adaptive 
equalizer. Inking its input from the sliced data samples in 
the modem receiver path (see Fig. 11). The model filter is 
similar in structure to the adaptive equalizer. The output 
of the mode] filter is compared to the received demodulated 
data {first rotated in phase to remove frequency offset) and 
the resulting error is used to update the model filter co- 
efficients using the least mean squares (LMS) algorithm 
(see "LMS Algorithm for Equalizer Update." page 13.) 

The model filter is a digital transversal filter having 128 
complex coefficients. In the steady state, the coefficients 
represent the sampled equivalent baseband impulse re- 
sponse of the channel. By performing a 128-poinl fast 
Fourier transform (FFT) on these coefficients, the ampli- 
tude and phase responses of the channel are obtained. Dif- 
ferentiation of the phase response gives the delay response. 
These results are presented at 33 points centered on the 
modem carrier frequency and covering the data bandwidth 
of the modem signal. In this way only distortion likely to 
cuuse problems to the modem is measured. 

Fig. 12a illustrates the steady-state model filter coeffi- 
cients of a channel containing a combination of attenuation 
and delay distortion. Figs. 12b and 12c show the attenua- 
tion and delay of the channel printed out by the I IP 4948 A. 

Phase and Amplitude Distortion Measurements 

The HP 4948A measures phase jitter in the band 4 to 20 
Hz and phase modulation in the band 20 to 300 Hz. The 
phase modulation measurement uses adaptive signal pro- 
cessing to suppress the background noise, and can extract 
modulating tones that may not be seen on the constellation 
display. Fig. 13 shows a V.29 constellation wilh a 24-dH 
signal-to-noise ratio and five degrees of phase modulation. 
The modulation is not easily recognized by visual inspec- 
tion and cannot be measured by a conventional measuring 
set. The HP 4948A separates these two impairments and 
makes separate measurements of noise and phase modula- 
tion. 

To reconstitute the input phase error without frequency 
shaping, the phase error value from the digital phase-locked 
loop is added to the output phase value. This provides a 
wideband phase error which is filtered to provide the dif- 
ferent bandwidths required for the phase measurements 
(see Fig, 14|. The phase error enhancer is an adaplive filler 




Fig. 13. V 29 constellation with 24-dB signal-to-noise ratio 
and 5° of peak-to-peak phase modulation 

configured to provide the modulation measurement de- 
scribed above. Because the phase error is a purely real 
signal, the enhancer filter is a real filter and not complex 
valued. The enhancer consists of a Iransversal filler pre- 
ceded by a delay element (see Fig. 15). The error is com- 
puted as the difference between the inpul phase error signal 
and the filter output, and the filter coefficients are updated 
using the LMS algorithm. The coefficients settle In a re- 
sponse that enhances coherent signals present in the phase 
error. The frequency response of the filter is a bandpass 
filter (or set of bandpass filters) tuned to the modulating 
frequency or frequencies present and so the background 
noise is suppressed. 

To illustrate the response of Ihe adaptive enhancer, a 
signal having phase modulation al 00 Hz plus odd har- 
monics was applied lo the HP 4948A. The steady-state 
coefficients of the phase error enhancer were recorded and 
an FFT performed on them by a computer (Fig. 16a). The 
resulting frequency response. Fig, 16b. shows how the 
adaptive filter tuned its response to let only Ihe modulation 
componenls pass. In Ihe absence of any true phase modula- 
tion, the enhancer taps will tend to zero. Hence, back- 
ground noise alone will not cause any measurement of 
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Fig. 15. Adaptive line enhancer enhances coherent signals 
present in the phase error while suppressing noise 

phase modulation. 

The time required to perform the coefficient update for 
the various adaptive filters (equalizer, line model, enhan- 
cers) averages about 2.5 /xs per complex coefficient and 
about 1 fis per real coefficient. This gives a total time of 
about 600 fis to perform the coefficient update for all these 
filters. Where the data symbol rate is 2400 Hz. there is not 
enough real time available to update each filter once per 
symbol interval. A multiplexing procedure is therefore 
used, whereby each adaptive filter is updated once per n 
symbol intervals. To ensure that the n symbol intervals are 
not synchronous with any coherent modulation impair- 
ment present, the multiplexing is randomized. 

The frequency offset from the expected carrier frequency 
can be derived from the second-order point of the digital 
phase-locked loop. This is then added to the expected car- 
rier frequency to provide an accurate measurement of the 
received carrier frequency. 

An amplitude error is also computed between the slicer 
output and the received signal. This is then used to provide 
measurements of amplitude jitter (4 to 20 Hz) and ampli- 
tude modulation (20 lo 300 Hz) similar to the phase mea- 
surements. To make a measurement of the signal-to-noise 
ratio that will not be affected by the presence of phase or 
amplitude modulation (normally <300 Hz), the phase and 
amplitude errors in a bandwidth greater than 300 Hz are 
computed. These are then combined and scaled to compen- 
sate for the missing section of the signal bandwidth to give 
the signal-to-noise ratio measurement. 

Transient Measurements 

Making transient measurements in-service on a modem 
signal poses some problems not encountered when making 
oul-of-service tests using a tone. Because normal data con- 
sists of random changes in phase and amplitude, a transient 
may not be distinguishable from normal data changes. 
However it is still possible to make useful measurements, 

Impulse noise is recorded whenever the error power of 



Processing Passband Signals 
in Baseband 



A passband signal s(t) can be described by the time-domain 
notation 

s(t) = s.(t) + s.(t) 

where s.(t) and s_(t) are the inverse Fourier transforms of the 
positive and negative spectra S.(f) and S_(f). respectively (see 
Fig 1a) 

The Hilben transform §(t) of the passband signal s(t) can be 
written as: 

§0) = -js.(t) + is-(t) 

and can be produced by a -90° all-pass network A HHbert 
transform filter pair, therefore consists of two filters, both having 
flat amplitude response across the data bandwidth, but with a 
- 90° phase difference 

Combining s(t) and the output s(t) of this Hilbert transform filter 
pair results in the complex-valued analytic signal 

a(t) = s(t) +jS(t) = 2s. (t) 

This isolates the positive-frequency spectral component of s(t) 
A negative frequency shift of the spectrum of the analytic signal 
by an amount f c produces r(t). the complex-valued baseband 
equivalent of s(t) 

r(t) m a(t)exp(-|2irl c t) = r,(t) + |r n (l) 

where r,(t) and r q (t) are, respectively, the m-phase and quadra- 
ture-phase components of r(t) 

r,(t) = s(t)cos(2irf e t) + S(t)sm(2wf c t) 

r p (t) = §(t)cos(277f c t) - s(t)sm(2jrf c t) 

The Fourier transform R(f) of r(t) is shown in Fig 1b Digital 
processing of the sampled complex-valued baseband signal r(t) 
is possible, provided that the sampling frequency f, is greater 
than or equal lo f 0 , the information bandwidth of the passband 
signal 
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Fig. 1. Demodulation of a passband modem signal 
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Fig. 16. (a) Tap coefficients of the phase enhancer when 
60-Hz phase modulation and odd harmonics are present (b) 
Frequency response of the phase enhancer 

the received point exceeds a threshold set by the user. The 
impulse noise thresholds available in the HP 4948A are 
with respect to the received signal level. Thresholds of 
- 18, - 12, - 6, and 0 dB are available. 
On the constellation diagram, these thresholds corre- 



spond to circles around each constellation point. An im- 
pulse will be recorded if a point is received outside all of 
these circles. Because an impulse is normally expected to 
be of short duration, it may be missed or reduced in size 
by the sampling process, It can be seen that the IIP 4948A 
cannot guarantee to count all impulses of a given size ap- 
pearing at its input. The impulse noise thresholds represent 
the level at which 50% of randomly spaced impulses will 
be counted. 

To measure phase hits, the phase error is monitored. Any 
excursion of this error above the threshold set by the user 
and lasting longer than 4 ms will be counted as a phase 
hit. The HP 4948A allows threshold settings of 10. 15. or 
20 degrees. These are sufficient to indicate if phase hits 
are likely to be causing data errors in the modem. 

Gain hits are measured in two ways. First, a gain hit 
detector operates on the amplitude error in a similar man- 
ner to the phase hit detector, detecting gain hits exceeding 
the user-defined threshold for longer than 4 ms. The HP 
4948A allows threshold settings of 1. 2. 3. or 6 dB. For 
QAM constellations, this may not detect every gain hit. A 
secondary gain hit detector monitors the average signal 
level for changes exceeding the gain hit thresholds. In this 
way, longer gain hits (greater than 200 ms) can be reliably 
detected. 

The dropout detector also monitors signal level. If the 
signal level becomes reduced by more than 12 (IB for longer 
than 4 ms. a dropout is recorded. 
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LMS Algorithm for Equalizer 
Update 



The most commonly used algorithm (or adiusnng the tap coef- 
ficients o1 an adaptive equalizer is the MSE (mean square error) 
or LMS (leas; mean squares) algorithm As these names sugges; 
tne algorithm operates to minimize the mean square error be- 
tween the equalizer output y„ and its desired output d„. The 
desired output win be one ot n idea! constellation points produced 
By the slicing process. 

Mean square error = E | d fc - y„ | 

where E denotes the expected value 

The simplest form of equalizer filler is thai of a linear transversal 
filter structure (see Fig 1). The input samples to Ihis filter must 
be provided at a minimum rate equal to the symbol rate II can 
be shown that providing samples to fhe equalizer filter at Iwice 
the symbol rate yields an improvement in performance.' The 
equalizer outpul y fc is computed as follows 





N 












Irl 



where N is fhe lotai number of filter coefficients, c are the com- 
plex-valued finer coeffiems Q ■ 0.. ,N). and x, are the compiex- 
vaiued equalizer input samples (j = 0. ..,IM). 

To update the equalizer, fhe error is computed af each symbol 
interval: 

e* = d> - y» 
and used to modify the filter coefficients. 

Ck., , = c k , + K e e fc xV,. i = 0 N 

where * denotes the complex con|ugate K» is the update con- 
siani. which is chosen as a compromise between stability and 
rate of convergence 

A further requirement to allow convergence is that the input 
signal x, must be random 

See reference 2 for further information 

References 
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D=Sample Period Delay 



Fig. 1. Adaptive equalizer struc- 
ture 



Architecture of the Real-Time Signal Processor 

The HP 4!J4)iA makes measurements using sampled-data 

signal processing tfil hniques. Alter some preliminary 
analog conditioning, fhe inpul signal is sampled and than 
digitized by a 12-bit analog-to-digital converter. The digital 
samples are passed to a specially designed signal processor 
which executes in real time the various algorithms required 
to produce the measurement results. 

The signal processor consists of two parts: a Control unit 
and an execution unit (see Fig. 17). 

The control unit is microprogrammed, with the microin- 
structions stored in RAM. An Instruction sequencer gener- 
ates the memory address of the instruction to be carried 
nut. Each microinstruction cuntains the signals to control 
both parts of the processor. Many microprograms arc stored 
in ROM and the correct program is downloaded into the 
signal processor RAM whenever the instrument is run. 

The processor execution unit is designed to operate as 
efficiently as possible in real time. It is optimized to per- 
form digital convolution (the Summation of products re- 



quired when computing a digital transversal filter), since 
this function represents the largest requirement for real- 
lime computation. The execution unit is designed around 
a high-speed l(>-by-16-bil multiplier. This device is 
supplied with filter coefficients and input data samples 
Simultaneously for fastest operation. The execution unit is 
split into two segments, the data memory A and the coef- 
ficient memory B. Memory A is connected directly to the 
Y input of the multiplier and memory B is connected to 
the X input of the multiplier via bidirectional bus drivers. 
This arrangement allows ihe accumulate ami add function 
(X*Y + PJ required for digital convolution to be performed 
in one instruction while also pipelining the next two fac- 
tors. 

Counters A and B are designed to have the capability to 
cycle on a variable length of memory, which minimizes 
the overhead required in data storage and access. The cycle 
depth of each counter is controlled by a mask register Both 
counters may also be set to perform a double increment. 
This is useful when filler coefficients are stored in double 
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precision (32 bits) but only the most significant 16 bits are 
used in computing the filter output. Also, the least-signif- 
icant bit of counter A can be reversed to simplify the mul- 
tiplication of two complex numbers whose real and imag- 
inary parts are stored in adjacent memory locations. 

32 scratchpad registers are used to hold parameters such 
as data pointers and constant values that are common to 
the activities of several subroutines, and to provide a work- 
ing storage area. 

An interface between the control unit and the execution 
unit is provided by registers K and L. Register L can be 
loaded with values from the microprogram, and register K 
can be loaded from register L or from the execution unit. 
Both registers can be compared with the execution unit 
data bus to determine sequencer branch instructions. By 
using register K, branching can be made dependent upon 
results obtained from the execution unit. 

The input sampling clock is chosen to be a multiple of 
the symbol rate and so n input samples are required to 
process one received symbol. This sampling clock is ad- 
justed under signal processor control to synchronize with 
the transmitted symbol rate. A software first-in, first-out 
(FIFO) structure is implemented. At convenient intervals 
during the program, a check is made to see if a new sample 
is available or a new transmit sample is required. Whenever 
sufficient samples to process a received symbol are not 
available, the program waits until these samples are re- 
ceived. In this way the microprogram repetition period is 
synchronized with the symbol interval. 

Use of this FIFO structure allows the program cycle to 
exceed the symbol period on occasion without loss of data. 
This allows lengthy processes, for example FFT processing, 
to be performed on an occasional basis. 

Signal Processor Development Tools 

Since the HP 64000 Microprocessor Development Sys- 
tem (MDS) did not support custom processors at the time, 
we had to develop the tools we needed. We identified four 
tools: a program assembler, a data assembler, a linker/ROM 
generator, and a program development utility. This pro- 



gram development utility we called the Software Develop- 
ment System (SDS). 

SDS has two parts, a user interface and a set of execution 
routines which interact with the signal processor, 

The user interface is a softkey-driven program modeled 
on the HP 64000 MDS. It is written in Pascal and runs on 
an HP 9000 Series 200 or 300 Computer. The execution 
routines are written in Z80 assembly language and are res- 
ident in the HP 4948A. 

The SDS execution routines and the normal operational 
firmware of the HP 4948A share routines to configure and 
communicate with the signal processor. This simplifies the 
transfer of developed signal processor programs to firm- 
ware ROMs. 

The major facilities provided by SDS are: 

1) Load program and data from ROM in the HP 4948A or 
from an HP 1000 Computer via a serial link. The program 
and data assemblers are on the HP 1000. 

2) List program and data memory. 

3) Edit data memory. 

4) Start and stop the signal processor, with or without 
interaction with the HP 4948A measurement firmware. 

5) Set a breakpoint and display the signal processor status 
when the breakpoint is encountered. Fig. 18 shows a typical 
breakpoint screen display. 

6) Select the point in the signal processing from which 
data is passed to the X and Y outputs on the HP 4948A 
rear panel. This allows an engineer to examine, for exam- 
ple, filter coefficient settling or raw FFT results. In normal 
operation the point is fixed to provide the constellation 
display. 

It is worth noting that the breakpoint facility, the ability 
to display data while the signal processor is running, and 
the XY output display are the only facilities provided for 
debugging the real-time software. Without special hard- 
ware, other facilities would require the signal processor to 
be operated at less than full rate, which is not acceptable 
because the programs are time dependent. 



BREAKPOINT- 0100 occurs 1 times 



HP4848A/SDS 3.1 



register R; 0000 stack: 0024 

**** 
**** 
**** 
**** 
**** 

**** 
**** 



register K: 0FCF 
register P: DE8D 3440 



counter A: 0520 
counter B: 1525 



SCRATCHPAD: 

0000: 0000 7FFF 8000 006C 0020 9000 0000 1000 

0008: 833C 5305 1F03 2B23 458D 4000 0117 06CE 

0010: 0FCF 0FCC 0300 0EF0 0D80 96C0 0D80 44EC 

0018: 09CE 094C C000 C313 1C9D 0016 04AA 1D26 

STATUS: Breakpoint found 



Fig. 1 8. Breakpoint screen display 
ol the software development sys- 

_dump_ _load_ _niodify_ _list_ _start_ _stop_ _break_ xy tem used in the HP 4948 A project. 
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Digital Phase-Locked Loops 



A digital phase- locked loop consists of the same basic blocks 
as an analog phase-locked loop, but is implemented as>ng aata 
samples These oasic blocks are a phase detector, a loop litter, 
and an oscillator 

These three blocks m a modem receiver digital phase-locked 
loop are shown m Fig 1 

The phase detector consists of a rotation algorithm followed 
by the phase error calculation The rotation algorithm rotales the 
equalizer complex output (x,.x Q ) by an angle f) determined by 
the digital phase-locked ioop output 

y, = xeosfl +■ lysine 
y a = x g cosfr - x,sinfl 

The phase error is then computed as the phase difference 
between me rotaior output (y„y q ) and Ihe sliced point 

A second-order digital loop filter is shown It consists of two 
update constants K, and K 2 . chosen to give the desired loop 
bandwidth and damping factor 1 

K, = 1 - a ! - f? 

K 2 = 1 + a 2 - 2a + f 

where 

a = cos(<u„TV1 -c 2 ) exp(-cto n T) 
p = sin(o),jVl -c 2 ) expf-cwj) 



and u»„ is the loop natural frequency, c is a damping factor, and 
T is the sampling period 

If a frequency offset exists in the equalizer output, Ihe second- 
order point of the digital phase-iockeo loop assumes a dc value 
proportional to this frequency offset 

The oscillator consists of a digital integrator followed bv a 
sin<cos conversion A one-sample delay is added to reflect the 
delay around the loop (equivalent to one symbol interval) 

The frequency response Y/X ot the digital phase-locked loop 
>s as follows 



1 +z- , (K,-K 7 -2) + z- 2 {1-K,) 

This is a high-pass characteristic Therefore, frequency offset 
and low-frequency phase jitter are removed from the signal at 
Y The loop is most ellective at removing phase jitter whenever 
a high loop bandwidth is chosen However it can be shown thai 
the noise bandwidth of the digital phase-locked loop increases 
with loop bandwidth Since it is not desirable to Inject extra noise 
at this point, the choice of a loop bandwidth is a compromise 
between phase litter removal and noise minimization 

Reference 

I W.C Unosey aria Chak Ming Che. * Survey ol Digllal Phase-Locked Loons. 
Proceedings ot the IEEE Vol 69, no 4. April 1981 pp 410-431 
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Fig. 1. Digital phase-locked loop 
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An Infrared Link for Low-Cost Calculators 
and Printers 

by Steven L. Harper, Robert S. Worsley, and Bruce A. Stephens 



MANY OF HP'S HANDHELD CALCULATOR cus- 
tomers have told us of their need to create a perma- 
nent record of their calculations easily. The need 
seems to be particularly acute for users of financial cal- 
culators. A banker or real-estate agent often wants lo give 
a client a printed record of loan information or perhaps an 
amortization table showing interest paid and remaining 
balance. Because of this customer feedback, printing capa- 
bility was high on the list of design priorities fortheHP-lHC 
Business Consultant,' 

There are two approaches to providing this feature. One 
method is to design another model of the calculator with 
a built-in printer. The earlier HP-91 and HP-97 Calculators- 
are examples of this approach. Although the portability of 
the unit suffers somewhat, this is a good solution for the 
customer who uses the printer a lot and knows of the need 
for Ibis capability before buying the calculator. It is less 
ideal for the person who really wants full portability or 
didn't realize the need for a printing capability until after 
the calculator was purchased. For this individual the other 
approach, that of designing a separate accessory printer 
which connects to the calculator in some way. is the better 
solution. This approach also yields somewhat lower de- 
velopment cost and a shorter design schedule. The HP-4 1C 
Calculator uses this method.' ' 1 and the decision was made 
to design an accessory printer for the HP-18C also. 



The receiver uses a photodiode which acts as a weak 
current source with an amplitude proportional to the inci- 
dent light intensity. A sensitive gain-controlled pre- 
amplifier provides frequency selectivity, demodulation, 
and conversion of the photodiode current to logic: voltage 
levels. Since the HP-18C Calculator already has a 32.768- 
kHz oscillator for its time and alarm functions, our infrared 
link uses 32.768 kHz as the infrared modulation frequency, 
rather than the slightly higher value used by conventional 
remote-control units. 

Silicon photodiodes respond to a broad range of wave- 
lengths, including most of the visible spectrum. To reduce 
unwanted signals, the photodiode in the receiver is often 
encapsulated in a material that is opaque to visible light, 
but transparent to the longer infrared wavelengths. Various 
kinds of optical filter materials are also used as windows 
in front of the photodiode to reduce extraneous light further 
by moving the cutoff wavelength still closer to 940 nm. 
The infrared receiver in the printer for the HP-18C uses 
both of these techniques. However, incandescent lights and 
sunlight still have strong components in the infrared range. 
The modulation of the bursts allows some frequency selec- 
tivity that reduces this dc and low-frequency optical inter- 
ference still further to provide a higher signal-to-noise ratio 
and an improvement in the distance over which the link 
will operate reliably. 



Interconnection Method 

One very critical design area for such a printer is the 
means of interconnection to the calculator. The HP-IL inter- 
face 1 is used in the HP-4 1C for connection to a number of 
peripherals, including an accessory printer. This would 
have provided much more capability than was needed for 
a simple printer-only interface, and would have cost more. 
In addition, we had received a number of complaints from 
customers about the inconvenience of the cables for the 
interface and batten,' recharger with our portable products. 
With this in mind, we began to investigate the possibility 
of a wireless interface for a printer powered by disposable 
batteries. 

Infrared transmission seemed to be the only wireless 
technology that allowed the use of low-cost, low-power, 
and readily available components. Infrared remote-control 
units for television sets and videocassette recorders have 
been in use for years. Their transmitting element usually 
consists of one or more infrared light-emitting diodes driv- 
en so as to produce short bursts, each containing a few 
pulses of invisible infrared light at a wavelength of 940 
nm. The pulses within each burst have a repetition fre- 
quency of about 40 kHz and their intensity is proportional 
to the current through the diode(s). Information is encoded 
by varying the time between bursts. 



Implementing the Link 

The cost of adding the infrared transmitting circuitry in 
the calculator is minimal. This is especially important since 
it allows us to include that part of the link in every cal- 
culator without penalizing the customer who does not want 
the printing capability. Otherwise it would be necessary 
to resort to a more expensive and complex plug-in module 
system, which would likely add as much or more cost to 
the calculator, even without the module. 

Unfortunately, the receiver end of the link is substan- 
tially more expensive. The infrared preamplifier chip re- 
quires several discrete components and a regulated supply. 
The additional printed circuit board area needed was much 
more than could be accommodated in the calculator. Be- 
cause of this, it was necessary to make the infrared link a 
one-way-only interface — the calculator is the transmitter 
and the printer is the receiver. 

While cost and size considerations made this decision 
obvious, it nevertheless represented a trade-off in link per- 
formance. The printer cannot send handshake signals to 
the calculator, indicating readiness to receive more data. 
Because of this, after enough characters are transmitted to 
fill the printer's buffer, the calculator must carefully pace 
subsequent transmissions so that even the slowest printer 
can keep up. When the printer has fresh batteries, it can 
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print at a rate of slightly more than one line per second. 
When the batteries are near the end of their useful life, the 
rate is reduced to just over one half line per second. It 
would have been nice to be able to run the printer from a 
regulated supply rather than directly from the batteries so 
that the speed would be more constant. Unfortunately, the 
current requirements are quite high (up to 1.5A average. 
3A peak while printing) and the inclusion of such a supply 
would have escalated the cost of the printer far beyond its 
design objectives. In any case, the user will seldom notice 
this trade-off since most printing with the calculator is 
done in segments smaller than the size of the 200-characler 
print buffer. Under these conditions, the printer performs 
as fast as it is able, given the current state of the batteries. 
For longer print segments, the first eight lines or so print 
as fast as the printer can go, and then the system slows to 
a rate of slightly more than one half line per second. 

One of the most important specifications forany interface 
is the maximum data rate. For this infrared link, the rate 
is slightly less than 80 characters per second. Other impor- 
tant parameters are distance and directional sensitivity. 
Commercial infrared remote-control units typically have a 
range of thirty feet or more. This is neither necessary nor 
desirable for calculator-to-printer communication. The in- 
frared link obeys a square-law response with respect to 
distance, that is. doubling the range requires four times the 
transmit drive current for a given receiver sensitivity. This 
quickly becomes a problem for the calculator's power sup- 
ply. In addition, a long-range capability in this application 
creates a potential problem where one individual's cal- 
culator might interfere with someone else's printer nearby. 
The minimum distance is about 18 inches to allow comfort- 
able desktop operation, but the maximum range is no more 
than a few feet to avoid such problems. 

The infrared light-emitting diode in Hie calculalur has 
an integral molded plastic lens which forms a somewhat 
directional radiation pattern. At an angle of slightly less 



than thirty degrees from the directional axis of the pattern, 
the intensity falls to half its maximum value along the axis. 
The photodiode in the printer has no lens and its sensitivity 
is much less directional. Its response is proportional to the 
perpendicular area facing the source and is therefore a 
cosine function. At sixty degrees the response will be half 
the maximum. If the calculator's batteries are fresh, and 
the calculator and printer are lined up facing each other, 
the range is about four feet. On the other hand, if the bat- 
teries are about ready for replacement and the calculator 
faces thirty degrees away from the printer, the maximum 
distance over which the link will operate is about 18 inches. 
Naturally, obstructions in the path and reflections can sig- 
nificantly change these values. 

How the Interface Works 

Fig. 1 diagrams the circuitry used for the infrared link. 
A combination of hardware and firmware in the calculator 
generates the proper gated pulse waveform to drive the 
infrared I ight-emitting diode. A resistor connects the micro- 
processor port to the base of a bipolar transistor that acts 
as the driver device to handle the relatively high current 
peaks required. In the HP-18C. the series resistor limits the 
light-emitting diode current to about 80 to 160 milliam- 
peres, depending on the state of the batteries. While these 
currents are fairly high, it may be possible in the future to 
integrate the transistor driver on the microprocessor chip, 
and thus reduce the size and cost of the transmit end of 
the link in the calculator even further. 

The transmitted infrared signal is converted into a cur- 
rent by the photodiode in the printer, and I hen into a very 
small differential voltage by the ptlll-up anil pull-down 
resistors. Two coupling capacitors feed this signal into the 
preamplifier 1C. In the preamplifier are two externally com- 
pensated gain stages with automatic gain control. The pulse 
bursts then pass through a tuned synchronous demodulator 
stage and an output integrator and pulse shaper before 
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reaching the logic signal levels required lo drive the inter- 
rupt line of the printer's microprocessor. 

Electrical interference is a special problem for the ex- 
tremely high-gain preamplifier. Careful printed circuit 
trace routing for power supply and ground lines and power 
supply filtering are essential. The typical solution to this 
problem is shielding, but this is particularly difficult for a 
small portable product with a nonmetallic case and no 
connection to earth ground. Several circuit configurations 
were tried before an acceptable solution was found. A 
capacitor is added in parallel with the photodiode, its value 
carefully chosen such that high-frequency noise is shorted 
to ground and prevented from getting into the first stage 
of the preamplifier without attenuating the 32.768-kHz sig- 
nal frequency appreciably. This increases the link range 
substantially. 

The calculator sends bursts of infrared light that are mod- 
ulated with a 32.768-kHz square wave to produce 6 to 8 
pulses of light in each burst. Fig. 2 shows two typical bursts. 
Each 32.768-kHz cycle consists of a 15.26-/xs pulse of light 
followed by a 15.26-jts pause. 

Coding 

The data is encoded in bit times which are subdivided 
into half-bit times. A bit time is defined as 28 periods of 
a 32.768-kHz waveform (approximately 854.5 fi$). Time 
intervals are measured from the leading edge of the bursts. 
There are three kinds of bits (see Fig. 3 for an example): 
- One bit. A one bit is defined as a burst at the beginning 

of the first half-bit time with no burst in the second 

half-bit time. 

Zero bit. A zero bit is defined as no burst in the first 
half-bit time and a burst at the beginning of the second 
half-bit time. 

Start bit. A start bit is defined as a burst at the beginning 
of three consecutive half bit times, an otherwise illegal 
sequence. Start-bit bursts can have six to nine 32.768- 
kHz pulses of infrared light. 

Each frame consists of a start bit followed by 12 data 
bits. The first four data bits are the error correction bits 
and the remaining eight bits are the byte being transmitted. 
There must be a delay of at least three half-bit times between 
frames, measured from the end of the last bit time of a 
frame to the leading edge of the start bit of the next frame. 
This gives a maximum data rate of about 78 bytes/s. An 
example of a complete frame is shown in Fig. 3. 

Error Correction 

Two kinds of errors are expected to be the most likely: 



— ►] [-—30.5 M s 

Fig. 2. Data is transmitted as a series ot bursts ot infrared 
tight, each burst formed by six to eight pulses of energy at 
a pulse repetition rate of 32 768 kHz 

bits that are missed entirely and noise bursts introduced 
in addition to the correct data bursts. The bit decoding 
routine treats bit times with extra bursts (noise) as missed 
bits since it does not know which burst was data and which 
burst was noise. Therefore, the error correction code only 
has to correct one kind of error — missed bits. Flipped bits 
(1 ~* 0 or 0 ~» 1 ) are much less likely since this requires 
a noise burst to occur in the opposite half-bit time of a 
missed burst, so these errors are not corrected. 

Each error correction bit encodes the parity of a subset 
of the data bits, allowing correction of up to two missed 
bits by checking the parity of separate sets of bits. The 
correction bits (HI to H4) are set as the even parity of the 
data byte ANDed with the following masks: 

Bit Mask 

Hi 01111000 

H2 11100110 

H3 11010101 

H4 10001011 

Unidirectional Communication 

The unidirectional infrared interface permits the cal- 
culator to talk to the printer, but the printer cannot com- 
municate back. This eliminates the need for any receiver 
circuitry in the calculator. Conversely, the printer is saved 
the circuitry needed to transmit back to the calculator. 

As a result of the unidirectional nature of the communi- 
cation, the calculator has no direct information on the 
status (or even the existence) of the printer. It can merely 
transmit bursts of infrared light in such a manner that the 
printer can handle them. The most critical piece of informa- 
tion that is missing is whether the printer's buffer is full. 
The printer has a 200-character buffer. The calculator must 
make sure that this buffer never overflows. The printer is 
capable of emptying the buffer at a rate of so many lines 
per second, but the number of lines in the buffer depends 
on how many characters there are per line. 
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A simple solution would be simply to wait long enough 
following each transmission of a line to be sure that the 
printer has finished. This doesn't take much advantage of 
the printer's buffer and causes the calculator to remain 
inactive for prolonged periods of time. What we would 
really like is to have the calculator strive to keep the 
printer's buffer full. After a long pause without printing 
the printer's buffer is certain to be empty, so several lines 
can be transmitted immediately and the printer should be 
able to buffer them and print them as fast as possible. Only 
when the calculator has sent enough lines to fill the 
printer's buffer should the calculator have to wait to trans- 
mit more data. 

A truly perfect algorithm would have the calculator keep 
track of when each of the lines was transmitted and how 
many bytes were in each line. However, this requires too 
much memory. Instead, some simplifying assumptions are 
made. All lines are assumed to contain 25 bytes (24 charac- 
ters plus an end-of-line byte), which means that the 
printer's buffer will hold up to eight lines. Rather than 
keeping track of when each line was sent, a simple line 
counter and a record of the time when the last line was 
sent are used. The counter is incremented each time a line 
is sent and the time of that transmission is saved. Before 
sending a line, the calculator checks how much time has 
elapsed since the last line was transmitted. It then calcu- 
lates how many lines the printer should have printed dur- 
ing that time and subtracts that number from the line count. 
If the count indicates that the buffer can now hold another 
full line, the calculator sends the line and saves the current 
time as the last transmission time and updates the line 
count to include this newly transmitted line. If the buffer 
cannot hold another line yet, the calculator waits and re- 
peats the above process until the buffer empties enough to 
accept another line. 

Assuming that the printer can print at the specified rate, 
this algorithm is foolproof. Since not all printers print at 
the same rate and they tend to slow down as their batteries 
deteriorate, the calculator must never send lines faster than 
the slowest printer can print while running at the lowest 
acceptable battery level. Hence, since most printers empty 
their buffers more quickly than the calculator is allowed 
to transmit, they will often pause while the calculator is 
waiting to send the next line. 

Critical Timing in the Link 

Another challenge in the printer transmission firmware 
was the timing of the bursts of infrared energy needed to 
transmit a character. As the development of the printer 
progressed along with the calculator, the need for accuracy 
of the burst timing became quite apparent. Each character 
is transmitted as a series of bursts of infrared energy mod- 
ulated at 32.768 kHz. Each transmitted byte (frame) is di- 
vided into 27 subparts which include the start bits, redun- 
dantly encoded data, and error correction information. This 
scheme is designed to maximize the printer's ability to 
recover garbled frames. 

The most common problem with infrared transmission 
is dropout of the infrared signal. Some of the transmitted 
bursts may not be detected by the printer if the calculator 
and printer are at the limits of their range or if something 



momentarily blocks the transmission path between them. 
The encoding scheme used works well for recovering from 
lost bursts, but only if the bursts are timed accurately 
enough so that the printer does not get completely out of 
synchronization with the calculator. This would cause the 
rest of the bits in the frame to be incorrect. 

To achieve the required timing accuracy, the calculator's 
microprocessor needs to start each infrared burst within a 
4-/JS window. Since the nominal clock rate is 617 kHz. the 
microprocessor must not be more than one cycle away from 
the perfect time. The clock is generated by an LC oscillator 
whose frequency varies slightly from unit to unit and with 
changes in temperature and battery voltage. The calculator 
also contains a 32.768-kHz crystal oscillator that the 
firmware can use to calibrate the loops used to time infrared 
bursts. The exact number of processor cycles required be- 
tween bursts is calculated, and by using variable cycle count 
instructions, this exact number of cycles is achieved. This 
calculation is performed before each line is sent to guaran- 
tee that the clock has not drifted significantly. The flow- 
chart in Fig. 4 shows what is done. 

The printer receiver decodes the incoming infrared 
bursts by measuring the time intervals between successive 
bursts. This time-interval measurement is subject to four 
sources of error: 

1. After being detected by the photodiode, the incoming 
bursts go through a preamplifier, which introduces addi- 
tional timing error. The input to the preamplifier consists 
of a series of 15.26-MS-wide pulses of current separated by- 
pauses. The preamplifier may not respond to the bursts of 
pulses in exactly the same way every time. Its output might 
go true on the nth pulse in one burst and on the (n + l)th 
pulse in the next burst, which would make the interval 
between bursts at the preamplifier output look 30.5 /xs too 
long. Similarly, the output could go true on the [n+l)th 
pulse in one burst and on the nth pulse in the next burst, 
which would make the interval look 30.5 fUS too short. 
Therefore the error from the preamplifier is approximately 
±30.5 /is. 

2. The output of the preamplifier goes to the interrupt pin 
of the printer's microprocessor. Since there are places in 
the printer's firmware where the interrupt must be tem- 
porarily disabled, the interrupt can be delayed up to 13 
processor cycles (about 34 /is), Depending on whether this 
happens on the first or last pulse of an interval, the interval 
can look longer or shorter by 13 cycles. 

3. Once the interrupt occurs, the interval between inter- 
rupts is measured using a timer in the CPU. Since the timer 
ticks only every 32 cycles (about 84 fts), additional error 
is introduced by this granularity. For example, an interval 
that is really 11.3 timer ticks long will be measured as 
either 11 or 12 ticks long depending on when it occurs 
relative to the timer ticks. 

4. The final error comes from the printer's oscillator speed 
variations. Since an LC oscillator is used, the frequency 
varies somewhat from printer to printer. Therefore, the 
actual time interval represented by the measured number 
of timer ticks varies with processor liming. A fast processor 
will show more timer ticks for a given interval than a slow 
processor. 

The receiver code uses the time interval since the last 
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interrupt as an index into a fixed timing table to determine 
whether the current interrupt is for a one bit or a zero bit. 
The time interval must be adjusted by five ticks if the last 
bit was a zero since the interrupt for a zero occurs at the 
midpoint of the bit time rather than at its beginning. The 
ability to correct up to two missed bits means that the table 
must be seven half-bit times long to cover the bit sequence 
1XX0 where X indicates a missed bit. Table I shows the 
range of timer ticks calculated for each bit-to-bit interval, 
taking into account the above errors as well as the number 
of ticks actually used in the timing table. 
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The burst timing resyncs on each received burst since 
the time of each interrupt is saved as the starting point of 
the time interval between il and the next interrupt. Start-bit 
liming is handled as a special case. The start bit must be 
received correctly before the code looks for the 12 data 
bits. After the frame is received, the byte is checked using 
the error correction bits and corrected if necessary. 

Looking at an earlier version of the calculated timing 
table, it became apparent that the calculator must transmit 
the infrared bursts very accurately to get reliable decoding 
of received frames since the intervals overlap when bits 
are missed. For example, if 34 processor ticks occur be- 
tween bursts, the cause is two missed bits followed by 
either a one or zero bit, but the printer would interpret it 
as the latter. Table I includes the maximum allowed error 
in the calculator transmission as well as the printer errors. 
The overlap of intervals leaves a possibility of improper 
bit decoding, but a statistical simulation showed that the 
probability of this occurring is very low. 
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A Low-Cost Wireless Portable Printer 

Based on a unidirectional infrared transmission path, this 
small thermal printer can provide hard copy of HP- 18Cand 
HP-28C calculations. 

by David L. Smith and Masahiko Muranami 



THE HP 82240A INFRARED PRINTER (Fig. 1) is a 
portable battery-powered thermal printer capable of 
printing a maximum of 24 columns of alphanumeric 
characters or 166 columns of continuous graphics per line. 
Designed for use with an HP-18C or HP-28C handheld cal- 
culator.'^ the information to be printed is transmitted to 
the printer by the calculator using an infrared beam. This 
transmission method is discussed in detail in the article 
on page 16. 

The printer uses HP's standard 58-mm-wide black-print- 
ing thermal paper. The 2-inch-diameler, 80-foot-long roll 



will provide about 6000 lines of print. User conlrols include 
power, print intensity, and paper advance switches. The 
HP Roman8 character set is provided. 

Power is supplied by four commercially available AA- 
size batteries and can be supplemented by an ac adapter 
with a common barrel-shaped plug. The unit can accept 
adapters with ac or dc output. With full power the printer 
is capable of printing 0.8 line per second. One sel of fresh 
batteries will print up to one roll. 

The HP 82240A measures approximately 7.25 inches 
long by 3.5 inches wide by 2.5 inches tall. It weighs about 




Fig. 1. The HP 82240A Infrared 
Printer is a battery-operated print- 
er designed lor use with the HP- 
ISC and HP-28C Calculators The 
need lor connecting cables is 
eliminated by using an inlrared 
beam lor data transmission. 
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one pound when loaded with a full paper roll and batteries. 
A manual, paper roll, and batteries are included with the 
printer. 

Product Design 

The components of the HP 82240A can be divided into 
several general categories (see Fig. 2): printer mechanism, 
printed circuit assembly, battery contacts, electrostatic dis- 
charge protection, and plastic parts. 

The development time for the HP 82240A was rather 
short because of its scheduled announcement along with 
the HP-18C. One factor that enabled quick development 
was the decision to purchase an OEM printer mechanism. 
The mechanism was chosen for compactness, quiet opera- 
tion, and graphics printing capability. Its cost accounts for 
one third of the total part cost of the printer. Testing was 
conducted to ensure acceptable life, environmental, and 
drop-survival performance. Based on qualification test re- 
sults, the manufacturer agreed to modify the mechanism 
to meet our drop test and package drop test requirements. 

Other parts such as switches, CPU, and interconnects 
were chosen for low cost and savings in development time. 

Two battery springs were designed to connect the bat- 
teries to the printed circuit board. Nickel-plated beryllium 
copper was chosen for high strength and corrosion resis- 
tance. The 3. 3-by-4, 5-inch single-sided printed circuit 
board is a departure from recent double-sided and/or hybrid 
board technology used in HP's handheld products, Lower 
cost was the main reason for this decision. 

Attention was paid to efficiency and manufacturability 
throughout the design process. A CAD/CAM system was 
used from initial layout to drawing generation. Compo- 
nents of the printer such as plastic parts, metal parts, and 



the printed circuit board were designed as wireframe models. 
To ensure proper interaction among the parts, purchased 
components such as the paper roll, batteries, printer mech- 
anism, switches, photodiode, and ac socket were also re- 
created in the data bases. Where necessary, these models 
could be manipulated to determine feature locations and 
to check for fit and interferences. The rotating motion of 
the paper door, for example, was simulated to determine 
its pin location in the bottom case and its snap detail in 
the top case (see Fig. 3). Application of CAD/CAM methods 
to the design process greatly increased confidence that all 
components would perform together as intended. 

Early in the design process, manufacturing engineering 
advised that parts allowing layered assembly were more 
desirable. An effort was made to design plastic parts that 
held components in place during assembly, thus eliminat- 
ing as many two-handed operations as possible. The solu- 
tion chosen uses snap fits and slip fits throughout the prod- 
uct and allows assembly from the bottom case up. The 
battery shorting bars and contacts snap into the bottom 
case to allow manipulation of the assembly without dis- 
locating them. TheESD protection components and printed 
circuit assembly are located by screw bosses. The keycaps 
slip onto the switch actuators and the printer mechanism 
is secured. Two screws locate the mechanism within a 
small tolerance band to eliminate the possibility of paper 
jams. The ac adapter receptacle and infrared window snap 
into the bottom case, after which the top case is slipped 
over the whole assembly. Six screws hold the cases together 
to ensure acceptable drop performance. The cosmetically 
sensitive paper door and paper tear-off window are snapped 
into place at the end of the assembly process. 
Custom tooling for plastic parts was another area in 




Fig. 2. Components used in HP 
82240A 
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which CAD/CAM played a major role. The plastic injection 
molds for the top and bottom case were built entirely using 
computer-aided-manufacturing techniques. The wireframe 
data base from R&D was transferred to a similar system in 
manufacturing. The mold designers used the part data base 
to create the mold data base. No part drawings were neces- 
sary, since the data base contained the required tooling 
information. Waterline locations, inserts, ejector plates and 
all electrode designs were completed on the system. The 
complex shape of the case parts would have made conven- 
tional calculations time consuming and difficult, but the 
system made number-checking trivial. Details such as the 
external radii along the intersection of a curved surface 
and a drafted plane were programmed and cut on a CNC 
(computerized numerical control) milling machine with 
great accuracy . With conventional techniques, milling such 
details exactly as the print specifies is nearly impossible 
and very time consuming. Complete tooling for the top and 
bottom case was manufactured in seven weeks, compared 
to quotes of nine to twelve weeks from outside vendors 
without CAD/CAM capability. Design modifications were 
also conveyed to the mold designers through the part data 
base. The hard-copy documentation for the top and bottom 
case was done after the molds were completed for produc- 
tion parts. 

Because we lacked sufficient experience with single- 
sided printed circuit boards, manufacturing engineering 
gave considerable attention to the solderability and testing 
of the board. Design guidelines were first obtained from 
Roseville Terminal Division. The pad and trace design in- 
corporates features designed for optimum solderability and 
strength in the finished product. Solder defect data was 
collected by conducting wave soldering experiments at 
Vancouver Division, from which design modifications 
were determined. 

During development, the decision was made to transfer 
production to Singapore Manufacturing Division. A coordi- 
nated effort for a smooth transition was accomplished in 
several stages. First, assembly tooling was designed and 
built in Corvallis with the aid of Singapore engineers. Parts 
were sourced domestically, whether custom or commer- 



cially available. Lab prototypes were assembled in Corval- 
lis. The results gave information upon which design im- 
provements, tooling debug, and process refinement were 
based. Complete QA testing was conducted in Corvallis 
with a Singapore engineer, while some of the tests were 
duplicated in Singapore. Singapore then began procuring 
parts locally and initiated tooling for custom parts except 
plastic molds. Tooling and custom parts were shipped to 
Singapore for the production prototype build, for which 
Corvallis engineers were at hand. Finally, for production, 
the plastic molds were sent to Singapore. 
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Fig. 3. Simulation ol paper door rotation used to determine the location ol its mounting pin 
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Manufacturing State-of-the-Art Handheld 
Calculators 



by Richard W. Riper 



HANDHELD CALCULATOR users are demanding 
more functions in smaller, less-expensive packages. 
At the same time, new products must be brought 
out in shorter times. This requires greater cooperation be- 
tween R&Q and manufacturing. On theHP-18Cand HP-28C 
project, ' the lab and manufacturing teams began working 
together from the very beginning, long before the mechan- 
ical design was firmed up. This helped ensure that the 
designs coming out of the lab could be built easily on the 
production line. Also, on this "fast-lrack" project, much 
of the tooling work had to begin before all of the design 
details were worked out. 

One form of this cooperation was to have R&D design 
into manufacturing's strengths — using existing processes 
and technologies where possible. This meant getting man- 
ufacturing personnel involved in the design process, for 



example by giving the printed circuit board designers 
guidelines for the size and arrangement of solder pads for 
the surface mount components and specifying the amount 
of clearance required for these components for loading. 
Guidelines for the design of the display assembly were also 
given so that technologies already developed for the auto- 
matic assembly of Series 10 calculator displays could be 
used. 

There were a number of areas of the design, however, 
that required new manufacturing technologies. A pallet 
conveyor for final assembly, automated key trim and load, 
and robotic placement of RTV sealants were new areas for 
us. and our existing manufacturing capabilities had to be 
extended in other areas. 

One new technology used on this project was CAD/CAM. 
The HP-18C and HP-28C were the first products at our 
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division to be designed primarily on our CAD system, 
which consists of local workstations connected to HP 9000 
Computers. This resulted in easier sharing of design infor- 
mation, which also was more accurate. Our CAD/CAM sys- 
tem is linked directly to several computer-controlled mill- 
ing machines in our model shop, so that parts can be 
machined without having to reenter part geometry. Some 
of the tooling was also designed and built using CAD'CAM 
techniques, which resulted in tools that are more accurate 
anil have better repeatability. Some of the machining on 
the plastic molds was done using the CAD/CAM system, 
such as the nomenclature for the keys, saving shop time 
compared to traditional methods. In addition, the layout 
of the final assembly line was done on the CAD system, 
which made it easy lo try different alternatives and move 
assembly stations around for the best work flow. 

Production Flow 

The production flow (Fig. 1) begins with the electronic 
assembly. The circuit boards for the HP-18C and HP-28C 
are produced in a subpanel of four boards to reduce han- 
dling of individual boards and to fit the processing equip- 
ment. Three custom ICs. the two display drivers and the 
CPU. are attached and wire-bonded directly to the boards 
during tin) hybrid assembly. The panels then move lo the 
printed Circuit assembly area for other components. Here 
the subpanels are screened with solder paste and fixtured 
in a robot workcell for loading of the surface-mount com- 
ponents (Fig. 2], The robot arm contains a reflective-light 
sensor, which is used lo find the exact position of the 
etched conductor traces on the subpanels. This ensures 




Fig. 2. SMT robot 



that the two ROMs and 12 discrete components are loaded 
accurately. This is an example of designing into manufac- 
turing's strengths, since similar robots load boards for our 
established products such as the Series 10 Calculators and 
the HP-71B Handheld Computer. It is also an extension of 
our existing capability in that this is the first time we have 
added surface-mount components to a hybrid circuit. 

The HP-18C Business Consultant is produced in five lan- 
guages: English. French. German, Spanish, and Italian. Cur- 
rently, the HP-28C is produced as a single-language prod- 
uct. Each HP-18C language variation has its own ROM set 
so that softkey labels and messages appear in the localized 
language. The six different printed circuit assembly vari- 
ations are produced by just changing the ROM set. This 
greatly reduces the number of subassemblies that must be 
stocked and reduces the changeover time to build a differ- 
ent model to minutes. 

After robot loading, the subpanels enter an automated 
soldering system. They are fed on a conveyor through a 
predrying oven to drive off the solvent in the solder paste, 
then into a vapor phase reflnw machine where the balls of 
solder in the paste liquefy, soldering the components onto 
the board The subpanels are then inspected for solder joint 
quality, washed, and sheared apart into individual boards. 
Four components not currently available in surface-mount 
packages are then hand soldered to the boards before they 
are washed again and sent to electrical test. 

The boards are electrically tested on an HP 3065 Board 
Test System using a fixture that was designed and built 
just for this product. The test fixture probes both sides of 
the board simultaneously, including all of the pads for 
connection to the liquid-crystal display (LCD). This fixture 
is also used for testing the subpanels during the hybrid 
assembly, which gets more leverage out of one tooling de- 
sign. The tested assemblies then move to the final assembly 
area, where they are mated with the LCD before being 
placed into the calculator. 

Final Assembly Conveyor 

The final assembly of the HP-18C and HF-28G represents 
a departure from the way we have labrit.ated previous prod- 
ucts. Instead of a rigid, one-piece package, the calculator 
has two main cases connected by a double-jointed hinge. 
This makes the product hard to hold during manufacturing, 
especially before all of the parts have been joined together 
For this reason, we chose a pallet conveyor for moving the 
calculator through the assembly steps. Another benefit of 
using this type of conveyor is that the amount of work in 
progress (WIP) can be tightly controlled. This leads to better 
control of inventories and more efficient production. 

The pallet conveyor assembly line (Fig. 3) is controlled 
by an HP Series (1000 Model 231) Computer. This computer 
is interfaced to the hardware through three HP 3488A Data 
Acquisition and Control Units ami its control software is 
based on a program written to control a similar conveyor 
used in the assembly of the HP Vectru Personal Computer. 

The pallets (Fig. 4) consist of a metal plate held in a 
plastic frame by four precision bushings. These bushings 
allow accurate alignment of the pallets at each of the auto- 
mated stations on the line. The plates are fixtured to hold 
the parts of the calculator, with one calculator per pallet. 
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Fig. 3. Final pallet conveyor assembly line layout. 



Metal plates embedded In the plastic frame of the pallet 
activate inductive switches mounted on the conveyor so 
that the control computer will know when the pallets are 
in position. The computer controls all pallet movement 
around the rectangular conveyor, signaling the automatic 
stations to start operation once a pallet is in position. The 
computer also watches for signals from the operators at the 
manual stations that they have completed their operations 
and the pallets can be moved on. The conveyor is asyn- 
chronous, so each pallet can move on once an operation 
is finished as long as there is space available for it down- 
stream. This pallet conveyor then forms a mechanized de- 
mand-pull production line. 

The first station on the final assembly line is a manual 
station where an operator places the two bottom cases and 
the hinge halves on the pallet. The polyester-film keyboard 
assembly is also placed in the cases and routed through 
the hollow hinge at this station. The second station is an 
automated hinge press which completes the snap-together 
assembly of the hinge halves. After moving across the end 
of the conveyor, the operator at the third station places the 
top cases into the pallet after snapping in the battery con- 
tacts. These formed wire battery springs give reliable con- 
tact to the printed circuit board without the need for hand- 
soldered wires. Soldered wires not only take a long time 
to assemble, but are very difficult to automate. 

The next station on the assembly line is an automated 
key trim and load system. The keys are two-shot molded 
in clusters (the key label is molded from a different color 
of plastic, not just printed on). These clusters must be 
trimmed apart, leaving the individual keys. The keys can- 
not be molded in the same sequence as they appear in the 
product, as is done in our other calculators. In addition, 
the keys are molded from three different colors. This re- 
quired the development of a robotic system capable of tak- 
ing the trimmed keys and placing them in the proper loca- 
tions in the top cases. 

The controller for this robot has two parallel processors, 
which allows it to operate the key trim machines at the 



same time that the robot arm is loading keys onto a fixture 
that flips them down into the top cases waiting on the 
pallet. The clusters of keys are stacked in metal magazines 
after plastic molding, allowing automatic loading of up to 
100 calculators without attention from an operator. The 
five different language variations of the HP-18C use the 
same set of keys, while the HP-28C uses a different set of 
clusters. Again, changeover can occur in a few minutes. 

At the next station, an alcohol-cure RTV compound is 
dispensed into the cases by a robot to bond the display 
window and the piezoelectric beeper. RTV is also used to 
seal the electronics against damage if the batteries should 
leak and to provide additional protection against electro- 
static discharges. A robot was chosen for this operation 
because it can apply a smooth, uniform, and continuous 
bead of RTV. an operation difficult for an operator to do 
by hand. At this station, as well as at the key-load station 
before it. the pallet is positioned by the bushings for accu- 
racy. The windows are inspected by an operator for cosmet- 
ic defects and placed in a tray that is presented to the robot. 
The beepers are stack loaded in a magazine and fed au- 
tomatically to the robot. 

The next operation attaches the LCD to the printed circuit 
assembly (Fig. 5). This operation uses another robotic sys- 
tem, chosen for the high accuracy required. The liquid-crys- 
tal displays, as well as the metal clips that hold them to 
the printed circuit assembly, are tray loaded for the assem- 
bly robot. The robot places the clip in a holding fixture 
and passes the LCD under a reflective-light sensor to find 
the interconnection pads. The robot then takes the LCD to 
an automated tape dispenser and places strips of double- 
sided adhesive tape on each long side of the LCD. The 
robot then places the LCD into the metal clip, based on the 
position data sensed earlier. The LCD and clip assembly 
is then placed on a ramp that slides the assembly to an 
operator who places two elastomeric connectors over the 
LCD contact pads and mates the assembly with the hybrid 
printed circuit board. 

The resulting assembly is then placed in a testencrimper, 
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Fig. 4. Final assembly pallet 



where the keylines and several test points on the printed 
circuit board are probed and a set of diagnostic tests is run. 
A vision system uses two cameras to look at the LCD dur- 
ing this test to make sure that all of the pixels are operat- 
ing. With over 4,000 pixels per display, this is not an op- 
eration that can be reliably done by eye. After the assembly 
passes the lest, the tool automatically folds over the tabs 
on the metal clip, holding the printed circuit board and 
the LCD tightly together. The operator places this assembly 
into the calculator and places two conical beeper springs 




: cup 



into holes in the printed circuit board. Like the battery 
contacts, these give reliable contact without the need for 
hand-soldered wires. 

The pallet then moves to the first of two flip stations, 
which is an automated tool that picks up the back case 
assembly and mates it with the top cases. There are 101 
plastic bosses molded in the bottom cases that have to fit 
through holes in the top cases, with little room for misalign- 
ment. The next station is an automated heatstaker, which 
uses heated pins to form rivet-like heads on (he plastic 
bosses. These hold the calculator together — no screws are 
used. Once heatstaked together, there is no way of getting 
a unit apart without destroying the plastic cases. After pass- 
ing across the end of the conveyor, the pallet stops at the 
second flip station, where the assembled calculator is 
turned back over into the other side of the pallet. 

The next station is a manual station where the overlay 
labels are placed on the calculator. These four labels cover 
the heads formed on the plastic heatstake bosses and pro- 
vide user information. The overlay set is different for each 
model and language variation being produced, just as the 
ROM set is. The pallet then passes on to the last station, 
where the batteries are placed in the calculator and a 
number of self-tests are run. The calculator is also inspected 
for cosmetic defects and sample printing is done on the 
separate printer to make sure that the infrared LED trans- 
mitter for sending data to the optional printer operates 
correctly. The empty pallet continues on the conveyor to 
the first station to start the cycle all over again. The finished 
calculators are carted to the pack-out area, where they are 
boxed with the owner's manual. The owner's manual is 
another part of the product that is peculiar to the model 
and language. 
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Information Technology and Medical 
Education 

This paper discusses the use of information technology in 
an experimental curriculum at Harvard Medical School and 
describes several of the computer-based educational 
modules that have been developed for the program. 

by G. Octo Barnett, M.D., Judith L. Piggins, Gordon T. Moore, M.D., and Ethan A. Foster 



WITHIN THE LAST FEW DECADES, powerful 
forces have radically changed the scope and com- 
plexity of the health sciences and the delivery 
of health care. The explosion of knowledge in the basic 
medical sciences makes it a formidable task to keep abreast 
of the medical knowledge base. II has been estimated lhat 
over 600,000 articles are published in the biomedical liter- 
ature each year. If physicians were to attempt to keep up 
with the literature by reading two articles per day. in one 
year they would be more than 820 years behind. If physi- 
cians were to read everything of possible biomedical rele- 
vance, they would need to read 1640 articles each day. 

In addition to the problem introduced by the exponential 
growth of the medical knowledge base, the aging of the 
population, the shift from acute illness toward chronic dis- 
ease, the emphasis on cost containment, the increasingly 
corporate nature of health care delivery, and the availability 
of information processing technology are radically chang- 
ing the way that health professionals function today. These 
factors will surely shape the way that health professionals 
of the twenty-first century provide medical care. 

Despite the major advances in the science and technology 
of health care, and despite the new challenges to health 
care, the training of physicians today differs little from 
what it was a half century ago. Tor all of the health disci- 
plines, the structure of education still consists primarily 
of lectures in which a procession of teachers relate large 
quantities of scientific material to a passive student audi- 
ence. This has placed impossible time demands on the cur- 
riculum, and has far outstripped the ability of students to 
absorb the quantity and complexity of scientific knowl- 
edge. It is not practical to increase the duration of profes- 
sional education, it is educationally and medically undesir- 
able to increase the fragmentation that results from narrow 
specialization, and it is not possible to depend on continu- 
ing education to fill the gap. 

There is considerable reason to believe that computer- 
based educational applications can facilitate acquisition of 
essential knowledge and mastery of problem-solving skills. 
Comprehensive training and experience with modern 
methods of information management during the students' 
formative years may greatly enhance their effective func- 
tioning as health care practitioners and as professionals 
committed to life-long learning and teaching. 

We recognize the inherent tension between the techno- 



logical and the personal aspects of health care. Information 
technology has the potential to address the ever-chauging 
and ever-broadening mass of knowledge concerning I he 
etiology, prevention, and treatment of disease as well as 
the maintenance of health. This use of technology, however 
important, must not detract from the fundamental human 
aspect of care: the relationship of an individual health pro- 
fessional to an individual patient. 

The potential application of information technology in- 
volves content, but more important, involves the method 
of education. Students should be given fewer "answers" 
and more "tools" — tools for self-teaching and for synthesiz- 
ing, framing, and revising knowledge. They should have the 
Opportunity to practice from the earliest days of profes- 
sional education the skills of seeking information, testing 
hypotheses, and solving problems. The underlying objec- 
tive is in part the transfer of current information, but more 
important, the creation of an environment where the student 
takes increasing responsibility as an independent learner. 

The New Pathway 

Harvard Medical School has initiated a new curriculum, 
called the New Pathway, which involves a basic restructur- 
ing of medical education and a greater emphasis on prob- 
lem solving and independent learning. In September 1985. 
the New Pathway program started with a group of 24 stu- 
dents selected from the entering class of 165 students. The 
24 students will remain in this separate curriculum 
throughout the four years of medical school. In September, 
1986, 38 new first-year students also began the New Path- 
way program. 

The New Pathway program makes extensive use of active 
educational methods such as problem-solving and informa- 
tion management, self-paced learning, and small group dis- 
cussions. There are few lectures; instead there is more em- 
phasis on the student assuming individual responsibility 
for his/her own education. One of the key elements of the 
New Pathway curriculum is the intensive use of informa- 
tion technology as a primary educational and information 
management resource to assist the student in the mastery 
of the scientific basis of medicine, and in the development 
of problem-solving skills. Each student and each faculty 
member has access tu a computer for personal use. In ad- 
dition, there is an electronic mail network that supports 
sharing of information among students and faculty. This 
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computer technology is used to provide increased access 
to the knowledge base of medicine, both through an auto- 
mated bibliographic reference capability and through the 
development of innovative computer-based programs to 
access medical knowledge bases. 

Technical Issues 

In 1984. Harvard Medical School received a five-year 
grant from Hewlett-Packard to provide an integrated com- 
puter network to support the communication and informa- 
tion processing needs of the New Pathway students and 
faculty members. As of September 1986. the New Pathway 
community is using the following hardware to support its 
information processing functions: 

■ An HP 3000 Model 48 Computer serves as the central 
computer for electronic mail communication. 

■ Eighty HP Touchscreen (HP 150) Personal Computers,' 
each with 640K bytes of memory, 15 or 20 megabytes of 
hard disc storage, a Thinkjet printer. 2 and a modem, are 
assigned to individual students and faculty. 

■ Fifty HP Vectra Personal Computers, each with 640K 
bytes of memory. 20 megabytes of hard disc storage, a 
Thinkjet printer, and a modem, are also allocated for 
individual student and faculty use. 

■ Thirty HP 2392 Terminals, each equipped with a modem 
and a Thinkjet printer, are assigned to faculty members 
who need access to electronic mail communication but 
do not need the other functions supported by the per- 
sonal computers. 

■ Five HP Portable Computers equipped with internal 
modems are used for word processing and accessing the 
electronic mail system by faculty on vacation or while 
traveling. 

A number of HP-supplied software packages are used in 
the New Pathway program. These include: 

■ HP Desk* 5 on the HP 3000 Computer for electronic mail 
communication. 

■ The MS "-DOS operating system for the personal com- 
puters. 

■ WordStar* on the Touchscreen Computers and HP 
Executive Memomaker on the Vectras for word process- 
ing. HP Slate is available on the HP 3000 for users of HP 
2392 Terminals who have no stand-alone word process- 
ing capability. 

■ HP AdvanceLink on all personal computers for com- 
munications support. 

■ A selection of application packages, including more 
sophisticated word processors and data base managers, 
are used by some of the students and faculty on an ad 
hoc basis. 

Training 

The New Pathway users vary widely in their level of 
familiarity with computer technology — only five of the 24 
first-year students had significant prior experience with 
computers (usually word processing). We provide a spec- 
trum of support services that users can take advantage of 
as needed in their work with the personal computers. 

Several hours of group instruction for students are held 
at the beginning of the academic year. Faculty members, 
who receive their computers at varying times during the 

MS-DOS naUS registered trademark of Microsoft Corporation WordStar is a U S trade- 
mark ot W«oPr0 International Corporation 



year, can request individual training sessions. In addition, 
technical staff are available by telephone for specific ques- 
tions about the computers on an on-going basis. These in- 
quiries range from questions about how to accomplish a 
given task on the system to reports of hardware malfunc- 
tions. The staff attempt to diagnose problems over the tele- 
phone. If that is not possible, or if it is determined that 
there is a hardware difficulty, a technician is dispatched 
to the user site to investigate and replace any malfunction- 
ing hardware modules. 

One of the important goals of the New Pathway informa- 
tion technology effort is to provide computing power in a 
format that is easy to understand and use. and that is pre- 
sented in a coherent and unified package. We wanted a 
system that would not intimidate those unfamiliar with 
technology, while still being convenient to use for those 
who had already had some experience with computers. We 
found HP's PAM (Personal Applications Manager 6 ) screen 
to be an effective front end for allowing our users to select 
among the different software functions available on the 
personal computers. 

In the modules developed for the New Pathway we have 
attempted to standardize the interface, including the way 
that function keys are used and the use of windows and 
their graphical presentation on the screen. We developed 
a set of utility programs to perform these and other common 
functions which we supply to new software developers as 
they join the project. This saves each developer from writing 
a new set of programs to perform these functions, and leads 
to more standardized and consistent software modules. 

All application software developed for the New Pathway 
is written in the MUMPS" language. 7 MUMPS is an effi- 
cient data management and text manipulation language 
originally developed at Massachusetts General Hospital. It 
is now in use in a number of locations throughout the 
world for medically oriented software development as well 
as for business applications. MUMPS has been standard- 
ized by the American National Standards Institute (ANSI) 
so that all MUMPS systems support a common set of lan- 
guage features. MUMPS systems are currently available 
from commercial vendors for a large variety of computer 
hardware. Writing all of our software in MUMPS makes it 
easy for different applications to share files, use a common 
set of utilities, and call other applications as needed. It 
also simplifies the task of moving applications developed 
on the Touchscreen Computers to the Vectra Computers 
and vice versa. Finally, it enhances the transportability of 
the software we have produced to other medical schools, 
since these programs can be run on any computer for which 
a standard MUMPS system is available. 

All communication between the HP 3000 and the per- 
sonal computers is done over standard voice-grade tele- 
phone lines (Fig. 1). The decision to use telephone com- 
munications was based on the geographical distribution of 
the New Pathway user community. About half of the stu- 
dents live in the dormitory on the medical school campus; 
the others live in apartments scattered through the sur- 
rounding communities. Faculty members have offices lo- 
cated in almost a dozen different medical institutions sepa- 
rated by a considerable distance in the Boston metropolitan 

MUMPS is a trademark ol Trie General Hospital Corporation 
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area, and a number of faculty prefer (o have their computers 
located in their homes rather than in their offices. Tele- 
phone lines were the only feasible way of connecting such 
a widely scattered group of users. 

To facilitate the communication between the personal 
computers and the HP 3000. we make extensive use of HP's 
AdvanceLink communications package on the personal 
computers. AdvanceLink command files have been written 
to dial the telephone automatically and log the user onto 
the HP 3000 and into HP Desk. Other command files are 
available to transfer text files created on the personal com- 
puters to HP Desk and bring HP Desk messages from the 
HP 3000 to be stored in files on the personal computers. 
This capability has been particularly useful for the develop- 
ment of curriculum materials and reports where a number 
of faculty members contribute to a common document. 
Similar command files have been written to access au- 
tomatically the other computer services available to New 
Pathway users. The AdvanceLink capabilities of encrypting 
command files and turning the computer display on and 
off as required have made it possible for us to support 
access to these systems from New Pathway machines with- 
out publishing the passwords. 

The use of telephone lines for communication has lim- 
ited us to a communication rate to the HP 3000 of 1200 
baud. This limitation has not proved to be a problem for 
electronic mail communication, which is the only applica- 
tion currently supported on the central HP 3000. The per- 
sona] computers with their dedicated processors have been 
used thus far for all of our application development, which 
involves processor intensive activities such as graphics dis- 
plays. An added benefit of equipping each personal com- 
puter with a modem for electronic mail is that it makes it 
possible for each user to access commercial timesharing 
services for New Pathway-related functions. 
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Fig. 1. The various groups in the 
New Pathway program at Harvard 
Medical School (HMS) communi- 
cate with a central computer sys- 
tem via telephone lines. 



Distribution of new software modules as they become 
available is a time-consuming task in an environment such 
as ours where there are 130 different personal computers 
to be updated. Initially we accomplished this by duplicat- 
ing the software on flexible discs and mailing a copy to 
each user. This proved to be quite expensive in terms of 
administrative time and supplies. We now use a set of 
AdvanceLink command files and related software to trans- 
fer programs and data files from the HP 3000 to the personal 
computers via telephone lines. When a new application is 
ready for distribution, a copy of all programs and related 
data for that application is placed on the HP 3000. Users 
are notified via electronic mail that a new application is 
available. Each user then calls the HP 3000 and issues a 
request to transfer that application to the user's personal 
computer. When the transfer is complete, software is avail- 
able on the personal computers to transform the down- 
loaded information into the appropriate format to be run 
as an application module. This new capability has consid- 
erably streamlined the task of making new applications 
available to our users. 

Electronic Mail 

We did not anticipate the degree of impact the ready 
availability of electronic mail would have on the educa- 
tional experience of both faculty and students. Originally 
we believed that electronic mail was a relatively trivial 
application and that it would have little educational value. 
This view has proven to be a gross underestimation of the 
worth of electronic mail. We now consider this application 
one of the more important elements of the information 
technology support. In one typical four-month period dur- 
ing the first year the total number of accesses per student 
varied from 34 to 258. During one sample three-day period, 
all of the 24 students logged on at least once, and 15 stu- 



30 HEWLETT-PACKARD JOURNAL OCTOBER 1987 



l Copr. 1949-1998 Hewlett-Packard Co. 



dents accessed the system on all three days. 

The faculty uses the system for planning and developing 
the curriculum materials and cases, and for communicating 
with other faculty and with the students about specific 
course-related issues. Because of the geographical disper- 
sion of the Harvard Medical School faculty, curriculum 
planning and development in the past was typically as- 
sociated with many hours wasted in commuting to commit- 
tee meetings and in trying to communicate by phone, often 
playing "telephone tag" — leaving messages to call, not 
being available when the return call is made. etc. The in- 
creased efficiency of the communication and information 
sharing among the New Pathway faculty made possible by 
electronic mail has come to play an importan! role in cur- 
riculum development and. more important, has strongly 
influenced how the teaching sessions are planned and how 
the different tutorial sessions are implemented. 

The students use the system for sharing ideas about the 
curriculum assignments, for personal interactions, and for 
questioning the faculty. The students, as well as the faculty, 
believe that electronic mail facilitates faculty and student 
communication and cooperation in a community that may 
not have daily face-to-face contact. They feel that the intel- 
lectual "networking" made possible by the electronic mail 
system greatly improves the educational experience and 
makes it more enjoyable. 

Medical Education Modules 

A series of New Pathway medical education modules are 
incorporated into the curriculum as integral elements of 
the total educational experience. However, we emphasize 
that the New Pathway curriculum is not just a set of com- 
puter programs: the computer support is only one aspect 
of a much larger commitment to self-directed learning. The 
role of the computer is not to replace faculty contact but 
to improve faculty-student interaction and to enrich and 
extend the learning environment of the student. 

The dominant challenge in the application of informa- 
tion technology to medical education is the development 
of software. There is a paucity of outstanding medical edu- 
cational programs, and those that are available are often 
poorly documented, difficult to modify, and written in 
computer languages that we do not support. 

Six major classes of software are being developed for the 
New Pathway curriculum: 

■ File management applications related to medical knowl- 
edge and patient records 

■ Programs that facilitate vocabulary acquisition 

■ Data base access applications 

■ Test bank questions 

■ Basic science teaching programs based on physiology 
simulations 

■ Clinical teaching programs based on case management 
simulations. 

A number of programs developed for the New Pathway 
program are now in active use by the students: others are 
still in the prototype phase and are not yet integrated into 
the curriculum. 

File Management Applications. An important goal in the 
New Pathway philosophy is to stimulate the students to 
manage their own learning process efficiently and effec- 



tively, including the recording of one s educational experi- 
ences. The typical medical student uses 3x5 cards and a 
pocket notebook to record key references, course notes, 
useful items of information, etc. The Personal Reference 
File is a support program that is now being developed to 
provide a computer-based solution that combines the func- 
tions of a personal notebook, a personal filing system, and 
a clinical case book. 

An important component of the Personal Reference File 
is a standardized hierarchical vocabulary to index each 
record. This vocabulary is based on a terminology de- 
veloped by the National Library of Medicine to index med- 
ical literature. We believe that this vocabulary, known as 
MeSH for Medical Subject Headings, is a good model for 
organizing the medical knowledge base. The 15,000-term 
vocabulary is implemented on each studenfs personal 
computer as a window-driven set of displays (Fig. 2). 
Within each window, the student can move up and down 
through the tree structure. Once in the tree, the user can 
call up at any time a map of the path from the base of the 
tree to the current term. The student can request informa- 
tion about other locations within the nomenclature that 
contain related terms. It is also possible to view all contexts 
of a term within the model and switch among these con- 
texts. The use of this controlled vocabulary facilitates selec- 
tive retrieval of information from the Personal Reference 
File, and allows students and faculty to share notes and 
references that are relevant to the same topic. 

We plan to use this same strategy in the development of 
a clinical case book which can be used by the student to 
record a minimal description of each patient seen by the 
student. We will extend the MeSH vocabulary to provide 
the capability for the student to use a controlled nomen- 
clature in recording these clinical terms. This primitive 
medical record provides practice for the student in record- 
ing and retrieving medical record data using a computer 
system, and allows review of the clinical experiences of 
each student to identify areas where there are gaps in the 
educational experience. 

Vocabulary Acquisition. It is estimated that the nn-dii.il 
student's vocabulary must double during the first year of 
medical school in learning the basic language ol medicine. 
Particularly in the first two years, the student must engage 
in brute-force memorization of material, the relevance of 
which is not always apparent to the student. A major effort 
of New Pathway software development is devoted to pro- 
viding more efficient and effective techniques for learning 
the concepts, nomenclature, and definitions of medicine. 
These computer applications provide dynamic and interac- 
tive experiences that use graphic and visual images and 
integrate each new term or concept with the knowledge 
base already acquired. 

One such program developed for the New Pathway pro- 
gram teaches the student to recognize the visual patterns 
and accompanying nomenclature of normal and abnormal 
blood cells. This program uses a video disc controlled by 
a teaching program on the Touchscreen Computer to pre- 
sent images ol different types ol blood cells in an Interactive 
game format to challenge the student with different pattern 
recognition problems. The computer program requires the 
student to classify and interpret the different Images, and 
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Fig. 2. A window-driven set ot dis- 
plays allows students to browse 
easily through the MeSH vocabu- 
lary. 



provides feedback using other visual images to illustrate 
correct and incorrect interpretations by the student. 
Data Base Access. A central theme of the New Pathway 
program is the promotion of student-directed learning 
using a variety of educational resources; thus it is expected 
that the student will become skilled in accessing the pub- 
lished medical literature. A major limiting factor is the 
sheer volume of published articles of interest. More than 
3.000 journals containing more than 17,000 articles are 
indexed each month in the standard National Library of 
Medicine MEDLINE file of bibliographic references. MED- 
LINE now contains over six million references to articles 
published in the United States and seventy foreign coun- 
tries since 1965. Even though Harvard Medical School has 
a large and easily accessible medical library, time limita- 
tions often make it difficult for the student to locate and 
read appropriate articles or textbooks. 

All New Pathway students are provided access to a na- 
tional, computer-based, on-line information retrieval sys- 
tem— BRS/Saunders COLLEAGUE— which contains both 
the complete MEDLINE file provided by the National Li- 
brary of Medicine and also full text files of many of the 
more important journals and textbooks. Programs have 
been written to allow the students to use their own com- 
puter and modem to access these files through a national 
communications network. This provides them with an extra- 
ordinary opportunity for easily accessing the medical liter- 
ature to supplement their learning in each aspect of the 
New Pathway curriculum. 

Computer-Based Test Bank Questions. The educational 
strategies of the New Pathway curriculum are designed to 
promote independent learning and self-assessment. Stu- 
dent evaluation is based on competency and accomplished 
through regular formal evaluation procedures. In addition, 
all students are required to take the National Board of Med- 



ical Examiners (NBME) tests. As part of an informal self- 
assessment of knowledge acquisition on a continuing basis, 
and as part of the preparation for the NBME tests, a test 
bank of questions is available on each personal computer. 

This test bank does not simply score on a right/wrong 
basis but provides active feedback and interpretation as to 
the validity of the different answers. The item bank in- 
cludes questions that are multiple-choice assessments of 
factual recall and questions that challenge the student with 
problems of interpretation and integration of information 
in problem-solving situations. Questions on a variety of 
topics are currently available and additional sets of ques- 
tions are being developed by faculty and students. Clinical 
simulations of patient cases will also be used to evaluate 
the student's ability to deal with complex clinical data. It 
is not intended that this test bank be used in formal evalu- 
ation of the student, but rather that it provide checkpoints 
to assist both the faculty and the students in assessing the 
successful acquisition of factual information and clinical 
problem-solving skills. 

Physiology Simulations. In the basic medical sciences (e.g., 
biochemistry, physiology, pharmacology, etc.), it is often 
useful to classify biological phenomena according to body 
systems, and to describe their relationships using general 
system theory. In a system model, the student must learn 
how the different elements interact with each other, how 
the different parameters change with time, and how the 
parameters change as a result of external perturbations. In 
the medical school curriculum, laboratory exercises using 
animal experiments are used to demonstrate these systems, 
and to provide the opportunity for the student to learn the 
response of the system to different experimental interven- 
tions. However, such laboratory experiences are time-con- 
suming and expensive to set up and supervise, and often 
do not allow the student opportunity for extensive experi- 
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mental interventions. 

In many situations, computer simulation of biological 
systems can simulate the laboratory environment so that 
the student can observe a realistic model of the system in 
a variety of states, introduce different interventions, and 
learn by trying "what-if" experiments. Computer models 
can provide the student the opportunity to manipulate vari- 
ous elements of the system and gain an understanding of 
the interactions and the feedback controls that occur among 
the elements of the model. Computer-simulated models 
allow the instructor to specify and control the experiment 
more explicitly. Each student, or group of students, can be 
presented with the same challenge on the same experiment. 

Several computer-based physiological simulations have 
been developed for the New Pathway curriculum so far. 
including carbon dioxide regulation by the lungs and acid- 
base regulation. In the acid-base simulation (Fig. 3). for 
example, the student leams to characterize a variety of 
different acid-base abnormalities and to select appropriate 
therapies to correct each specific type of abnormality- In 
this program, extensive use is made of graphical presenta- 
tion of standardized plots of the relations between the dif- 
ferent biological variables. 

Computer-Based Patient Simulations. Problem solving is 
a fundamental activity of medical practice. Important tasks 
include deciding what clinical information to collect, and 
determining when there is sufficient data to justify making 
a diagnosis. The nature of clinical problem solving has 
been the subject of considerable research in recent years, 
with a general consensus being that it is an iterative and 
sequential process. The physician must collect a minimal 
data set first, formulate a diagnostic hypothesis that might 
explain the clinical findings, and then decide what further 
information should be collected to refute or refine the 
hypothesis. Further information is then collected, the data 



base is extended, and the diagnostic hypothesis is modified 
in light of the new information. This iterative process of 
data collection, hypothesis generation, and hypothesis test- 
ing continues until all relevant diagnostic issues have been 
resolved. This iterative hypothesis testing has been labeled 
a clinical experiment (analogous to a scientific experiment) 
where a successful result depends on the judgment and 
skill of the investigator (in this case, the physician) in the 
design, implementation, and evaluation of the experiment. 

During the last two decades, members of our group at 
the Laboratory of Computer Science at the Massachusetts 
General Hospital have been developing patient simulations 
of the generic class of case management problems. These 
patient simulation computer programs attempt to provide 
the student an educational experience that gives insight 
and practice in hypothesis formulation and data interpre- 
tation which would otherwise be difficult or impossible 
to provide with either lectures or assigned reading. The 
computer-based patient simulations allow the student to 
formulate hypotheses, decide what further information to 
collect, and improve skills in data interpretation and com- 
plex pattern recognition. 

In constructing these problem-solving simulations, the 
author must construct a model of the underlying disease 
process and how this disease might respond to therapeutic 
management. The computer program takes advantage of 
this knowledge of the simulated patient to respond to the 
student's requests for information or therapeutic maneuv- 
ers by describing the patient or the patient's response to 
treatment. 

The series of programs developed at the Laboratory of 
Computer Science include such diagnostic problems as 
coma, abdominal pain, anemia, bleeding disorders, menin- 
gitis, dyspnea, and joint pain. All of these patient simula- 
tion programs are available to New Pathway students via 
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dial-up access to a computer located at the Massachusetts 
General Hospital, and a subset of them are available on 
each student's personal computer. The special features of 
this computer-based patient simulation series of programs 
are threefold: 

D Each computer simulation emphasizes a probabilistic: 
rather than a deterministic: model of clinical problem 
solving, focusing on the uncertainty in the collection of 
clinical information and in the formulation of a differen- 
tial diagnosis. 

The underlying diagnostic model allows the program to 
function in a professor mode, by critiquing the student's 
performance in terms of efficiency of data collection and 
appropriateness of diagnostic interpretations. 
■ At any point in the work-up of the simulated patient, 
the user can request advice as to the most appropriate 
data collection strategy or can request that the system 
provide the appropriate differential diagnosis hypothesis 
given the information then available. 

Evaluation 

The evaluation of any innovation in graduate education 
is difficult since the students involved in the innovation 
are heterogeneous in background and skills. In addition, 
their performance is strongly influenced by factors other 
than the specific details of any change in the curriculum. 
Evaluation of the information technology innovation in the 
New Pathway program is particularly difficult since the 
overall objectives of the new curriculum are not specifically 
concerned with student performance on any test of factual 
knowledge. Instead, the goal is to stimulate the students 
to acquire the total set of skills, attitudes, and knowledge 
that will result in their becoming competent and caring 
physicians in professional careers covering the next several 
decades. 

Thus far. the only specific evaluation of the information 
technology aspects of the New Pathway program is a stu- 
dent questionnaire that was completed by the first class at 
the end of the first academic year of the new curriculum. 
The questionnaire requested the students to rate a number 
of the computer-based applications according to the follow- 
ing scale: 

7 — This application is of extraordinary value: my medical 
education is of significantly greater value because of the 
availability of this application. 

6 — This application is of great value: it should be supported 
and extended if possible. 

5- — This application is of value; I find it useful. 

4— This application is of some value, but not high priority. 

3 — This application is of little use to me. 

2 — This application is of no use. 

1 — This application is distracting, a time sink. I recommend 
it be terminated immediately. 

X — I have not used this application sufficiently to make a 
judgment. 

The list of applications to which the rating scale was 
applied included electronic mail, BRS/Saunders COL- 
LEAGUE access, word processing, test item data bank, 
physiology simulations, and patient simulations. Twenty- 
two of the 23 students returned the questionnaire. Table I 
summarizes the results. 
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We interpret these results to mean that most of the mod- 
ules are felt by the students to have a very high educational 
value. We believe the evaluation by these students is rele- 
vant and important, for these are students deeply committed 
to their own education and very cognizant of the enormous 
amount of knowledge and skills that must be acquired in 
a very short period of time. 

In the initial planning of the New Pathway program, 
there was concern that the use of the computer technology 
might interfere with personal communication among the 
students and between students and faculty. We asked the 
students to consider this issue in a separate question. Of 
the twenty students who responded, sixteen chose the re- 
sponse "The computer system and network capabilities 
have significantly improved and enhanced the communica- 
tion I have with my fellow students and with the faculty," 
while the remaining four students chose the response "The 
computer system has somewhat improved and enhanced 
the communication." This strongly suggests that our initial 
concern was not only groundless, but that, in contrast, the 
students perceived that the computer system enhanced the 
level of communication. 

Evaluation Questions Yet to Be Considered 

There are a number of important issues that have not yet 
been addressed, but which must be considered before any 
final evaluation of the technology innovation in the New 
Pathway program can be made. Perhaps the most important 
issue deals with the cost of the technology — including 
hardware, software, and support personnel. Financial re- 
sources are finite and there are many other competing needs: 
it is not enough simply to claim that information technol- 
ogy is a popular and effective educational innovation. 

At the present time all of the costs for the computer 
efforts of the New Pathway program are supported by a 
generous grant from Hewlett-Packard Company and by 
grants from several foundations. It is likely that the cost of 
the hardware will decrease in the coming years, although 
this decrease may be counterbalanced by a desire to use 
more expensive technology (e.g., higher resolution 
graphics, color displays, more powerful workstations, 
video discs, etc.). Costs for support and maintenance of 
the hardware and software as well as ongoing program 
development will remain substantial. There is a legitimate 
concern about any innovation that would increase the al- 
ready high costs of medical education. We believe it will 
be most difficult to identify educational costs that can be 
replaced as a result of the introduction of information tech- 
nology. 
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A second and related issue is to demonstrate the utility 
of students having their own personal computers, versus 
making available a smaller number of computers located 
in central teaching areas, a dormitory common room, and 
the library. We will explore this alternative approach in 
the next few years as we respond to a legitimate concern 
on the part of a growing number of students who are not 
in the New Pathway program, but who want equal access 
to the benefits of the information technology. 

We are also concerned with the extent to which the in- 
formation technology developments can and will be 
adopted by other medical schools. Obviously, if the tech- 
nology innovation is successful, it would be foolish to ex- 
pect that each of the 170 different medical schools should 
develop its own program and its own software. However, 
we do not know yet to what extent programs developed 
by our faculty for our students and for our educational 
environment will be acceptable to other faculties in other 
educational environments. We hope to address this ques- 
tion in the next two years by initiating a collaboration with 
several other medical schools whose educational objectives 



are similar. 
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A Framework for Program Development 

This paper presents a framework for recording a software 
design activity as a directed acyclic design graph, where 
each node denotes a fragment of the design and each arrow 
represents some kind of design decision that has been 
made 

by Derek Coleman and Robin M. Gallimore 



SOFTWARE DESIGN is a complex process involving 
many decisions. The developer is faced with the 
task of formalizing the problem and reducing its 
level of abstraction to that of the programming language to 
be used. 

It is on a clear understanding of the design that many 
life cycle activities such as maintenance, porting, and up- 
grading depend. However well a program is structured, its 
text is the result of the design process and is not to be 
confused with the design itself. A program text does not 
record the sequence of design steps lhal led to its construc- 
tion. Traditionally the more abstract aspects of a design 
are documented a posteriori in natural language. This is 
as inadequate as it is imprecise. 

This paper is an initial report on FPD. a Framework for 
Program Development. FPD supports an idealized history 
of 8 program development activity, and is similar to the 
inferential programming system suggested by Scherlis. 1 
The goal is to permit the documented construction of cor- 
rect programs. It is not intended to bind the designer to 
any particular methodology. Rather, the aim is to allow the; 
exploration of design possibilities, with enhanced Bonfi- 
dence that every avenue is safe. 

As each decision is made there is an associated proof 
obligation, which must be satisfied to maintain correctness. 
The proof obligations provide the hooks for verification 
(luring design. Whether they are proved formally or jus- 
tified informally determines the degree of certainty about 
(he correctness of the resulting program. An important ad- 
vantage of the framework embedded in FPD is thai il can 
support rigorous software development" within a spectrum 
of formality. 

The framework presented here uses a graphical notation 
to help record some aspects of the design of a program: 
" The component structure of the program and relation- 
ships between components are shown. 

■ Explicit Specifications, recorded separately from im- 
plementations of component bodies, define a compo- 
nent's global (interface) behavior in an implementation 
independent way. The graphical notation distinguishes 
statements of ivhul a component does from how it does it. 

■ A component specification may have several alternative 
implementations (in a single design), supporting choice 
of implementations and component reuse. 

• The definitions of, for example, the data types upon 
which ,i component specification has been based, are 
Included in the design record in a hierarchic, incremen- 



tal way. 

Using the framework, component and program specifica- 
tions are recorded during program design in a systematic, 
possibly formal, way. Significantly, the specifications can 
be related to both the definitions on which their intended 
meaning is based and the code modules that implement 
the component bodies using a simple graphical notation. 

Structuring documentation in this way can aid the com- 
munication and comprehension of design decisions relat- 
ing to program structure, the functionality of each compo- 
nent, representation of data, and the choice of component 
implementations. It can also drive the validation of design 
and implementation decisions by highlighting, graphically, 
the steps that have been taken and what criteria they must 
satisfy to produce an acceptable solution. 

The current state of the art makes a totally formal approach 
to software development impractical. Currently FPD is 
used to combine formal specifications, both executable and 
nonexecutable, with design-time testing and semiformal 
reasoning. In this form it is being used at Hewlett-Packard 
Laboratories' Bristol Research Centre by a team construct- 
ing a suite of computer-aided software engineering tools. 
Further research will explore ways of increasing the formal 
content of practical software development. 

Issues in Software Development 

The quality of the development process is crucial in the 
production of software. Some of the criteria against which 
design practices should be judged are: 
Correctness. How can the design process be organized to 
reduce the occurrence of bugs? II is especially important 
to avoid design errors, since these are much more expensive 
to locate and fix if they remain undiscovered until the 
software is in the field. 

Reuse. Many software projects repeat in slightly different 
contexts work that has already been performed. Improved 
design methods should permit the reuse of both code and 
designs. 

Maintenance. Maintaining and upgrading software is dif- 
ficult since it requires the rediscovery of concepts used 
during the development of the implementation, The tech- 
nical documentation for in-service software should include 
design blueprints similar to those used by maintenance 
engineers in other technologies. 

Practicality. Formalism should be used wherever il is 
appropriate, but il should not be allowed to derail progress. 
A useful way to regard formalism is as an underpinning 
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for informal arguments. If rigorous development methods 
are to gain widespread acceptance it is important that they 
be capable of modification to accommodate varying degrees 
ol formality. 

Correctness is the most fundamental issue since it makes 
no sense to reuse bug-ridden software. Similarily, mainte- 
nance costs of correct software will be much lower, since 
much maintenance is in reality bug-fixing. 

A Framework for Program Development 

Software design is a creative process. The designer navi- 
gates through the design, backtracking and aborting paths 
that turn out to be unpromising. These blind alleys and 
false starts are not useful in the postdesign life cycle. Only 
an idealized version of the design history is required, 

It is important that the idealized design history be 
monotonia. Once a decision has been made, it must not be 
corrupted by later decisions. Preservation of correctness is 
thus a central concern that requires all design steps to be 
explicit and have associated proof obligations. 

Large programs, incremental development, and reuse de- 
mand modularity. Designs and code must be modular to 
permit construction by teams of designers and to improve 
understandability. Modularity and specification go hand 
in band since specifications serve as the interface defini- 
tions between components. 

In I'PD, program development is viewed as a directed 
acyclic graph, where nodes represent design fragments and 
the arrows represent the kind of derivation step thai has 
been made (see Fig. 1). An entire design graph represents 
the history of a design. Each node denotes a program at a 
particular stage of its development. 

A design can be factored into four kinds of components: 
program specifications, program code, data types, and 
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property specifications. In the examples that follow. Com- 
mon Lisp is used as the programming language, but this is 
not essential to FPD. 

Program speci/ications are abstract machines that im- 
plicitly specify the changes of program state to be per- 
formed by imperative program operations. They can be 
specified using pre-post conditions. 2 The precondition is 
a predicate over the initial state and indicates the condi- 
tions for which the operation is defined to have an effect. 
The postcondition is a predicate that defines correct results 
by characterizing the relation between initial and desired 
final states. 

For example, a Common Lisp form that performs set 
union and updates its first parameter can be specified by: 

FORM (UPDATING-UNION a b ) 

IN b: set 

UPDATE a. set 

PRE True 

POST a = a U 'b 

where IN and UPDATE indicate read-only and input-ouput 
parameters. U is set union, and 'a.'b are the initial values 
of a and b. 

Program specifications define the interface behavior of 
program operations, so they permit many implementations 
to share the same specification. 

Program nodes contain the code for program operations. 
They implement the behavior defined by the program 
specification they satisfy. 

The value space for both programs and program specifi- 
cations is defined by data typo nodes. In general there will 
be a spectrum from the most abstract types for use in specifi- 
cations to the most concrete used by optimized programs. 
In this paper we use Common Lisp types at the concrete 
level and algebraic data types for specifications. 3 

For example, a specification of tho data type set of natural 
numbers can be built on top of natural numbers as follows: 

type set 
ops 

phi: — set 

{ _ ( : natural — set 

. U _ : set set — set 
lor all 

S.S1.S2 : set 
axioms 

S U (S1 U S2) = (S U S1) U S2 
S U S1 = S1 U S 
SUSS 
S U phi - S 

where U is the infix union operator, and other operations 
such as intersection and set membership have been omitted. 

KPD does not have a rigid distinction between specifica- 
tion and implementation. For example, program code may 
use abstract data types. The ability to mix levels of abstrac- 
tion freely is especially useful as a means of describing 
programs in a stage of mid-development with only some 
types fully concrete. 

To achieve real efficiency in the development of large- 
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scale systems requires the use of generic modules, which 
can be tailored to fit different contexts by the use of param- 
eters. 4 

Property specifications are used to place semantic re- 
strictions on the formal parameters of generic modules. 
They define the properties that must be satisfied by any 
argument to be used in an instantiation. Currently modules 
can only be parameterized by data types. Property specifi- 
cations are abstract data types that are intended to have a 
variety of interpretations, like meta-sort theories in Clear.'"' 

A trivial requirement would be the existence of a single 
type element about which nothing is asserted: 

property spec tnv 
type eiemeni 

The triv property could be used to specify a generic list 
data type: 

type list[ x tnv] 
ops 
nil: — list 

cons: x. element list — list 

member x.element list — Boolean 
for all 

I: list e,e':x.element 
axioms 

member(e, nil) ■ F 

member(e. cons(e',l» =(e= =e') or member(e.i) 

where = = is equality. 

A more substantial example of a property specification 
would be a requirement that a data type satisfies a partial 
order. This would be achieved by adding the axioms for a 
transitive, reflexive, and antisymmetric operator, 

Design Steps 

The arrows between nodes are design steps, which must 
satisfy proof obligations to ensure the correctness of the 
design decision. 

The creative design step is an extension which permits 
a new node to be added to the design graph to increase 
functionality. The proof obligation is that the new behavior 
can be meaningfully constructed without affecting the be- 
havior of the design graph. In the examples above, the 
program specification and the types have extended the 
types on which they depend. 

At the heart of sottware development is stepwise refine- 
ment of data and control in which problems are solved by 
successively inventing and concretizing abstractions. 1 ' The 
process ceases when an efficient solution is reached. 

Data refinements are recorded by realizations, which re- 
cord the implementation of a data type in terms of a more 
concrete data type. The mapping from the concrete to the 
abstract type is defined by means of an obstruction /unction 
and an invariant. The invariant is a predicate that charac- 
terizes the concrete values that represent valid abstract 
values. The abstraction function is the possibly partial map- 
ping from concrete to abstract values. The requirement for 
a realization is that every abstract value can be represented 
by at least one concrete value and that distinct abstract 



values do not have overlapping representations. 

For example, sets can be implemented by lists. The neces- 
sary invariant is that only lists without duplicates represent 
valid set values. 

INVARIANT PREDICATE SeLrep list 
torall l:list n natural 

SeLrepfl) iff membertn.l) implies onceln.l) 

where once returns true if and only if n occurs exactly once 
in I. 

ABSTRACTION FUNCTION SeLabs : list — set 
torall Hist n; natural 
SeLabs(nil) = phi 

SeLabs(cons(n.l)) = | n | U SeLabs(l) 

A control structure refinement is represented by an en- 
coding from a program specification to a program node. 
The requirement is that the program code must satisfy the 
program specification. 

A generic node is instantiated by supplying a data type 
for each formal parameter. The result is a new node in the 
graph structure. The proof obligation is that the actual pa- 
rameters satisfy the axioms of the property specifications. 

For example, a data type UsLoLNat can be constructed 
by instantiating the generic list. The only proof obligation 
in this case, that natural is a type, is trivial. 

An Example Development 

Fig. 1 draws together the examples developed above and 
shows how code for a list-based implementation of set of 
naturals can be developed. 

The program specification Nat_SeLas_Llst realizes SeLoL 
Nat using the abstraction function and an invariant given 
earlier. Its pre-post conditions are built on top of UsLoLNat 
and its specification of the UPDATING-UNION operator is at 
the COnClete level. 

FORM (UPDATING-UNION a b ) 
IN b: list 
UPDATE a: list 

PRE SeLrep(a) and SeLrep(b) 
POST torall x: natural 

member(x.a) iff member(x, a) or member(x,'b) 

and SeLrep(a) and Set rep(b) 

The concrete version is correct if the final value of the 
list a contains just those natural numbers belonging to the 
initial values of a and b. Additionally. UPDATING-UNION. 
like all operators at this level, has to preserve the represen- 
tation invariant. 

The program code module NaLSet_as_List provides Com- 
mon Lisp for the operations, for example: 

(detmacro updating-union (a b) 
(set! .a (set-union .a ,b)) 

) 

where set union is a function that nondestructively ap- 
pends two lists and removes duplicates. 
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The proof obligation is thai the body of the macro satisfies 
the pre-post condition. 

The function set union uses car. cdr. etc., which are pro- 
gram operations on lists. Consequently Nat_Set_as_List ex- 
tends the program specification LisLoLNat. 

Machine Support 

The initial motivation for FPD was as a means of organiz- 
ing program development. However, it also provides a suit- 
able basis for developing software engineering tools. Two 
kinds of development are underway at the Bristol Research 
Centre: library support for design graphs and support for 
formal specification. 

Currently there is a central project module library that 
provides system version control and source control features 
for design graph modules. An extension allows the compu- 
tation of the transitive closure of module dependencies to 
control recompilation and the checking of proof obligations 
in the face of updates. In the longer term it is intended to 
explore the possibility of making deductions about module 
relationships. 

It is vital to provide the machine processing of specifica- 
tions. It helps eliminate errors in understanding. Machines 
are meticulous in looking for errors. They help stop the 
fatal flaw of handwaving around difficult issues. The larger 
the specification the more vital is the need for machine 
support. 

Machine processing and the expressive power of logic 
pull in opposite directions. The more powerful a mathemat- 
ical system, the more difficult it is to provide effective 
support beyond syntax and type-checking. Real tasks re- 
quire powerful notations and powerful theorem provers. 
and for this the necessary technology does not yet exist. 

Unfortunately, verification only becomes viable at the 
level of proposilional logic, which is too weak for software 
specification. FPD compromises by using executable equa- 
tional data types, which allow specifications to be tested. 
The test cases are saved with modules for use later in the 
life cycle as a standard for testing code. 

Impact on Life Cycle 

The strength of FPD is that it makes software designs 



explicit. They can therefore be desk checked and subject 
to review by structured walkthrough. Additionally, the data 
type specifications that underlie designs can be executed. 
Executing specifications allows design bugs to be found at 
design lime.' The combination of checking in the large 
(structured walkthroughs) with testing in the small (execut- 
able specificalions and code) means that very high-quality 
error-free software can be produced. This has been con- 
firmed in practice. 

FPD permits substantial code and design reuse, since 
every interface has a specification, which may be used for 
matching a module against a proposed context. 

Code optimizations and upgrades take place in the con- 
text of a documented design with associated test cases. 
Maintenance effort is therefore substantially reduced, since 
it is not necessary to reinvent abstractions to do the work. 
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